By the end of this lesson you will be able to
- Describe how a scam works as a story with a hook, a hurry and a payment.
- Recognise a fake job offer, a fake investment, an impersonation call, a romance scam and a fake support call.
- List the red flags that appear in almost every scam.
- Apply a simple pause-and-verify routine before sending money or information.
- Explain why intelligent, careful people are also caught, and why that is nothing to be ashamed of.
Scams are not a computer problem. They are a persuasion problem that happens to use phones, messages and websites. A scammer does not need to break anything: they only need you to believe a story for long enough to send money or share a code. The good news is that the stories are few and old, and they share the same warning signs. Once you know the pattern, a brand new scam looks familiar. Every example in this lesson is an educational simulation with invented people and companies.
How a scam is built
A Scam is a trick to get your money, your personal details or access to your accounts by making you believe something false. Almost every scam has the same three parts. First comes the hook: something that grabs attention, such as a job, a prize, a friend in trouble or an official warning. Second comes the hurry: a reason to act now, so you do not stop to think or ask anyone. Third comes the payment or secret: the thing they actually want, such as a fee, a transfer, a gift card, a one-time code or your password.
Think of a pickpocket in a crowd. One person bumps into you (the hook), you are flustered and look the wrong way (the hurry), and the wallet is gone (the payment). Scammers use the same trick with feelings. They aim for excitement, fear, loneliness, kindness or embarrassment, because people decide badly in those moods.
- Step 1: HookJob, prize, warning, friend
- Step 2: HurryAct now, tell nobody
- Step 3: Payment or secretMoney, gift cards, codes
- Step 4: LossHard to get back
Read this figure as text
A flow of four boxes: hook, hurry, payment or secret, then loss, with a pause step that breaks the chain.
Step 1, the hook: an offer, a prize, a warning or a friendly stranger gets your attention. Step 2, the hurry: you are told to act now and to keep it secret. Step 3, the payment or secret: you are asked to send money, buy gift cards, share a code or give a password. Step 4, the loss: money or access is gone and is hard to recover. Pausing and checking with a trusted route at step 2 breaks the chain.
Five stories you will meet
1. The fake job offer
Amina has been searching for work. A message arrives on a chat app: “Congratulations! You have been selected for a remote data-entry job at Brightfield Services. Salary 90,000 a month. Pay a registration fee of 2,500 to secure your place.” She never applied, the company has no website she can find, and the person is in a hurry. This is an advance-fee scam: you pay a little first for a reward that never comes. A real employer does not charge you to start work. Another version sends you a cheque or a transfer for “equipment”, asks you to forward part of it, and leaves you owing the whole amount when the original payment is reversed.
2. The fake investment
Kamau sees an advert: “Double your money in 30 days. Guaranteed. Join our trading group.” At first he is shown a screen where his small deposit appears to grow. He is encouraged to add more, and when he tries to withdraw there is always a new fee. Real investments rise and fall and nobody can guarantee a profit. Promises of high, fixed, fast returns, pressure to recruit friends and screens that you cannot check independently are the warning signs.
3. The impersonation call or message
A caller says, “This is the fraud team at Lakeview Bank. Someone is trying to empty your account. To protect it, tell me the code we just sent you.” The caller sounds calm and knows your name, which is easy to find. The code they ask for is what lets them into your account. Impersonators pretend to be a bank, a tax office, a delivery company, a mobile network, a government office or even a family member with a new number. Calls like this are called Vishing, and the text-message version is Smishing. No genuine organisation will ask for a password, a PIN or a one-time code.
4. The romance scam
Fatuma starts chatting with a friendly person online. Over weeks they share photos, say loving things and never manage a video call. Then comes a crisis: a hospital bill, a customs fee, a plane ticket to visit her. A romance scam builds real feelings before it asks for money, which is why it works on clever and caring people. The red flags are a person who cannot meet or video-call, who moves the chat off the dating site quickly, and who always has a reason why you must send money.
5. The fake support call or pop-up
A pop-up says your computer is infected and tells Joseph to phone a “support line”. The person who answers asks him to install a remote-control programme “to fix it” and then asks for payment. This is a tech-support scam. Genuine security software and companies do not cold-call you about faults, and a web page cannot truly know that your computer has a virus. If you ever allowed remote access, follow the steps in the lesson on what to do when something goes wrong.
- Fake jobHook: a job you never applied for. Wants: a fee or your documents.
- Fake investmentHook: guaranteed fast profit. Wants: deposits, then more fees.
- ImpersonationHook: a warning from your bank or an office. Wants: a code, PIN or transfer.
- RomanceHook: affection from someone you never meet. Wants: money for an emergency.
- Fake supportHook: a pop-up or call about a virus. Wants: remote access and payment.
Read this figure as text
Five cards comparing fake job, fake investment, impersonation, romance and fake support scams by hook and demand.
Fake job: hook is a job you never applied for; it asks for a registration fee or personal documents. Fake investment: hook is guaranteed fast profit; it asks for deposits and then more fees. Impersonation: hook is a warning from your bank or an office; it asks for a code, PIN or transfer. Romance: hook is affection from someone you never meet; it asks for money for an emergency. Fake support: hook is a pop-up or call about a virus; it asks for remote access and payment.
The red flags that repeat
You do not have to memorise every story. Learn the signs that appear in nearly all of them.
| Red flag | Why scammers use it | What genuine organisations do |
|---|---|---|
| You did not ask for it (unexpected job, prize, call) | Makes you feel lucky or scared without time to check | Contact you after you applied or signed up |
| Urgency: “within one hour”, “today only” | Stops you asking someone else | Give reasonable time and written notice |
| Secrecy: “do not tell your bank or family” | Keeps helpers away | Welcome questions and checks |
| Unusual payment: gift cards, crypto, wire transfer, a personal account | Hard to trace or reverse | Use normal, traceable payment routes |
| Asks for a code, PIN or password | These open your accounts | Never ask for them |
| Too good to be true | Greed and hope switch off caution | Describe realistic, checkable terms |
A pause-and-verify routine
The strongest defence is a habit, not a gadget. When anyone asks for money, a code or personal details, do these four things in order.
Pause, check, ask, decide
Step 1: Pause
Do not reply or click. A real offer will still be there in an hour. Say, “I will call you back.”
You should see: You have bought time without giving away anything.
Step 2: Check through a route you chose
Look up the organisation yourself, using the number on your bank card, a statement or the official website you type in. Never use the number or link in the message.
You should see: You reach the real organisation, who can tell you whether the contact was genuine.
Step 3: Ask a trusted person
Describe the story to a friend or family member. Scams rely on secrecy, so a second opinion breaks them.
You should see: Someone else sees the red flags you were too close to notice.
Step 4: Decide, or walk away
If it still cannot be verified, do nothing. Declining costs you nothing.
You should see: No money, codes or details have been shared.
- Did you ask for or expect this contact?
- YesCan you confirm the sender through a trusted route?
- YesDo thisShare only what is needed, and only through the official channel.
- NoDo thisDo not reply or click. Contact the real organisation through a number or site you already trust, and tell someone.
- NoDoes it ask for money, a code or details, or rush you?
- YesDo thisDo not reply or click. Contact the real organisation through a number or site you already trust, and tell someone.
- NoCan you confirm the sender through a trusted route?
- YesDo thisShare only what is needed, and only through the official channel.
- NoDo thisDo not reply or click. Contact the real organisation through a number or site you already trust, and tell someone.
- YesCan you confirm the sender through a trusted route?
Read this figure as text
A yes or no decision tree that ends in either walking away or verifying through a trusted route.
Start: did you ask for or expect this contact? If no, go to the next question. Next: does it ask for money, a code or personal details, or push you to hurry? If yes, stop and do not reply. Then contact the real organisation using a number or website you already trust. If you did expect the contact, still check the sender through a trusted route before sharing anything.
Reading a simulated message
Here is an invented message. Read it as a scam hunter. This is an educational simulation: Brightfield Services does not exist.
Congratulations Amina! You are selected for a remote job at Brightfield Services.
Salary: 90,000 a month, no experience needed.
Pay the 2,500 registration fee today to keep your place.
Do not tell anyone until you start.
- Marker 1: You never applied: unexpected offer
- Marker 2: Fee in advance, with a deadline of today
- Marker 3: Secrecy keeps helpers away
Read this figure as text
A mock chat message offering a job and asking for a fee, with three numbered red flags.
A mock chat window shows an unknown number sending: “Congratulations Amina! You are selected for a remote job at Brightfield Services, salary 90,000 a month. Pay the 2,500 registration fee today to keep your place. Do not tell anyone.” Marker 1 points at the unexpected offer, marker 2 at the fee requested in advance with a deadline today, and marker 3 at the instruction to keep it secret.
Notice what is missing: a company website you can check, an interview, a written contract. The right response is to delete and block, and, if you wish, to report the number to the chat service. Do not reply “no thanks”; even a reply shows that the number is active.
Common mistakes
✖ Instead of: Replying “no thanks” or “stop” to a suspicious message.
✔ Do this: Do not reply at all. A reply shows that your number is active. Delete, block and report.
✖ Instead of: Trusting a caller because they know your name and a few details.
✔ Do this: Details are easy to collect. Hang up and call back using a number you found yourself.
✖ Instead of: Staying silent because you feel embarrassed.
✔ Do this: Tell someone you trust and your bank at once. Fast action is what limits the damage.
✖ Instead of: Believing a profit screen the other side controls.
✔ Do this: A balance shown on a site is not money you can withdraw. Test only with reputable, regulated providers you have checked independently.
If something goes wrong
- I cannot tell whether an offer is genuine.
- Search for the organisation yourself, look for an official website and contact details, and ask them directly through those details. If you cannot verify it, treat it as false.
- The caller says I will be in trouble if I hang up.
- That is pressure, not proof. Hang up anyway. Real officials accept a call-back through official channels.
- I already paid or shared a code.
- Do not wait. Contact your bank or payment provider at once, change affected passwords and follow the next lesson on payment fraud and reporting.
Key terms
- Scam
- A trick to get your money or details by making you believe something false.
- Advance-fee fraud
- A scam that asks you to pay a fee first for a job, prize or loan that never arrives.
- Romance scam
- A scam in which someone builds an online relationship to get money from you.
- Tech-support scam
- A scam that claims your computer has a fault and asks for remote access or payment to fix it.
- Vishing
- Phishing done by phone call, where the caller pretends to be someone trustworthy.
- Smishing
- Phishing sent as a text message.
Practise it for real
Reading is not the same as being able to do it. Complete these on your own computer, then tick only what you have actually done. These ticks are your own honest record: nothing checks them for you.
Mark the red flags in invented messages
On paper, invent two short scam messages of your own, one for a prize and one for a bank warning, using made-up names such as Wanjiru and Lakeview Bank. Underline the hook, the hurry and the payment or secret in each. Then write the sentence you would say to pause, such as “I will call the number on my card.” Use no real names, numbers or accounts.
Challenge: write a family safety rule
Write a short family or friends rule for money requests, for example “We always phone back on the usual number before sending money, and we never share codes.” Include what to do if an urgent message arrives from a relative's new number, and share it with one person you trust.
Knowledge check
7 questions. You need 80% to pass. Mistakes here are part of learning, and you can retry as often as you like.
Summary
- Scams follow a hook, a hurry and a payment or secret.
- The common stories are fake jobs, fake investments, impersonation, romance and fake support.
- Red flags: unexpected contact, urgency, secrecy, unusual payment methods, requests for codes.
- Pause, check through your own route, ask someone, then decide.
- Being fooled is not a sign of stupidity, and speaking up quickly helps.
Checklist: can you do these?
Marking a lesson as read does not prove you can do it. Skills count as demonstrated when you pass the quiz (not yet) and complete the practical tasks (not yet).
Related lessons
References and further reading
Official sources for details that can change between versions.
- Report a scam or suspicious message (National Cyber Security Centre (UK))
- Consumer advice: how to recognise and avoid scams (Federal Trade Commission (US))