Financial Scams: How They Work and How to Refuse Them

You cannot recognise every scam. You can adopt a process that defeats most of them without needing to.

The main categories

Impersonation. A call, text or email claiming to be from your bank, the tax authority, the police or a delivery company. The bank version often ends with a request to move money to a “safe account”, which no real bank has ever asked anyone to do.

Investment fraud. Guaranteed or unusually high returns, often with a professional website and fabricated regulatory credentials. Some clone genuinely authorised firms, using their real registration numbers with different contact details.

Romance and long-con fraud. Weeks or months of genuine relationship-building before money is ever mentioned. Now among the highest-loss categories reported in several countries, and the one victims find hardest to report.

Invoice and mandate fraud. An email, apparently from a supplier, solicitor or builder, notifying you of changed bank details. Common in house purchases, where the sums are large and the timing is predictable.

Purchase scams. Goods that do not exist, advertised on marketplaces and social media, with payment by bank transfer to avoid buyer protection.

Recovery fraud. Targeting people who have already lost money, offering to recover it for a fee. Victim lists circulate among fraudsters for this reason.

Why intelligent people fall for it

Fraud does not target stupidity. It targets predictable features of human decision-making under pressure:

• Urgency. A closing window, an account at risk, a payment that must go today. The purpose is to prevent you consulting anyone.
• Authority. Spoofed phone numbers that display your bank's real number, cloned websites, fabricated credentials.
• Fear. Arrest, a frozen account, a tax investigation. Fear degrades judgement reliably.
• Isolation. “Do not tell anyone, this is a confidential investigation.” Secrecy is a requirement of almost every long-running fraud.
• Sunk cost. Once money is in, victims keep paying release fees and taxes, because stopping means accepting the loss.

Studies consistently find that victims skew toward people who consider themselves financially capable. Confidence is not protection; a process is.

The process that works

1. Stop. Any pressure to act immediately is itself the warning sign. Nothing legitimate is destroyed by a pause.
2. Hang up and call back independently. Use the number on your card, your statement or the organisation's official website — never a number they gave you, and never by pressing an option on the call. Use a different phone if you can; some frauds hold the line open.
3. Verify the firm yourself. Check the regulator's own register, navigating there directly. Confirm the contact details on the register match what you were given — clone frauds rely on people checking the number and not the address.
4. Tell someone. Describing it out loud to a friend or family member breaks more frauds than any technical control.
5. Never move money to a “safe account”. There is no such thing.
6. Verify changed bank details by phone, using a number you already had, before sending anything. This single step prevents most invoice fraud.

If it has already happened

1. Contact your bank immediately. Speed genuinely matters — funds can sometimes be recalled if the receiving account has not been emptied.
2. Report it to your national fraud reporting service and to the police where applicable.
3. Change passwords on anything that may have been exposed, and enable two-factor authentication.
4. Check your credit file for accounts opened in your name.
5. Keep every record — messages, numbers, transaction references, websites.
6. Ignore anyone offering recovery. It is a second fraud.

In some jurisdictions banks are required to reimburse victims of authorised push payment fraud in defined circumstances. Ask specifically about the reimbursement rules that apply to you, and escalate to the financial ombudsman if the response is unsatisfactory.