:max_bytes(150000):strip_icc():format(jpeg)/creditscorecheck-c254d4f39aae46919b846f0f391011c6.jpg)
Internet scams are constantly evolving. The Federal Bureau of Investigation (FBI) documented a record of more than $16 billion in losses due to internet crimes in 2024—up 33% from 2023. Right now, con artists around the world are likely targeting a computer or mobile device near you. Recognizing the most common internet scams, such as phishing emails and debt relief scams, and upping your security game can safeguard your personal information and wallet.
Key Takeaways
- Internet scams result in billions of dollars in losses.
- Despite widespread warnings, some of the most well-known scams continue to defraud thousands of people a year.
- If you think you’ve been scammed, change your passwords, delete any questionable software, and contact your local police department.
Disaster Relief Scams
When disaster strikes, so do fraudsters, whether it’s a pandemic or weather-related. Hiding behind the guise of an actual aid organization, scammers typically use a tragedy or natural disaster to con you out of your money. By thinking you’re donating to an emergency relief fund, you unwittingly provide credit card or other digital payment information.
- How to avoid them: Only give to established, legitimate organizations. Visit GuideStar or Charity Navigator to verify the validity of any charitable organization you’re considering supporting before you donate.
Phishing Scams
You receive an email from a seemingly familiar enterprise that you deem legitimate, such as your bank, university, or a retailer you frequent. The message directs you to a site—usually to verify personal information, such as email addresses and passwords—that then steals your information and exposes your computer to attack by scammers.
Phishing scams are some of the most common attacks on consumers. According to the FBI, over 193,000 people fell victim to phishing scams in 2024. Collectively, they lost more than $70 million, or about $362 each.
According to the Federal Trade Commission (FTC), phishing emails and text messages frequently tell stories to trick people into clicking on a link or opening an attachment. Phishing attempts may:
- Say they’ve noticed suspicious activity or log-in attempts on your account
- Claim there’s a problem with your account or payment information
- Say you need to confirm or update personal information
- Include a fake invoice
- Ask you to click on a link to make a payment
- Claim you’re eligible to sign up for a government refund
- Offer a coupon for free goods or services
- How to avoid them: Never click the links provided in emails you can’t independently confirm. Doing so will make your computer and personal information vulnerable to viruses and malware. Although the sender may seem legitimate (which is exactly what the scammer wants you to believe), no reputable institution will ask for your password or other key personal information online.
Warning
Phishing emails are often rife with typos and grammatical errors. This is an intentional strategy scammers use to weed out those unlikely to fall for the scam.
Grandparent Scams
With grandparent scams, a fraudster poses as a panicked grandchild who needs cash immediately for some emergency—to get out of jail, leave a foreign country, or pay a hospital bill.
- How to avoid them: Resist the urge to act immediately. Scammers pull at your heartstrings and rely on you to respond quickly—before you’ve had a chance to think things through. Verify the caller’s identity and ask questions that a stranger couldn’t answer. Confirm the story with other family members or friends, even if (or especially if) the caller says to keep it a secret. And never send cash, gift cards, or money transfers.
Tech Support Scams
With this scam, you receive a phone call, email, or pop-up warning indicating your computer is infected. The scammer then:
- Prompts you to download an application that allows them to control your computer remotely
- Downloads an actual virus or otherwise makes you believe that something is wrong
- Tells you they can fix the problem for a fee
Another way to reach you is through search results: Tech support scammers work hard to get their websites to appear in online search results or run their own ads. These scammers often ask you to pay using a bank wire, gift card, or money transfer app.
- How to avoid them: Ask yourself: How would they know anything about your computer? But if you happen to give a scammer remote access to your computer, immediately update your security software, run a thorough scan, and delete anything it identifies as a problem. If you shared your username and password, change those right away as well.
Fast Fact
Tech support scams are common. The FBI reported just over 36,000 of these scams in 2024. If you think you’ve been contacted by or fallen victim to a tech support scammer, report it to the FTC.
Fake Antivirus Software
Fake antivirus software ads and pop-ups try to make you believe your computer is infected with a virus (or dozens of them)—and that you can fix the problem by downloading their software. These ads are also called scareware. These scammers get you two ways:
- They gain access to your credit card information.
- They gain access to your computer. When you click the download link, you get a virus, malware, or ransomware instead of antivirus software.
- How to avoid them: Always be wary of ads and pop-ups that prompt you to take immediate action or are hard to close. Be sure to install, update, and use genuine antivirus software to reduce the risk of scareware.
419 Fraud—Advance Fee Scams
Also known as the Nigerian letter scam, the 419 fraud is one of the most common scams on the internet. This is one you’ve likely seen in your own inbox. The advance fee scheme takes its name after the section of the Nigerian criminal code that outlaws fraud. According to the FBI, nearly 7,100 people reported falling victim to advance fee scams in 2024. Collectively, they lost $102 million, or roughly $14,383 each.
The scammer usually claims to be a member of a wealthy Nigerian or another West African family, reaching out to you personally after the death of a loved one. They seek to relocate a large fortune out of the country for safekeeping purposes and into your bank account. The catch? You must submit small fee payments in return for a large chunk of their cash cache.
- How to avoid them: You should never respond to these requests or volunteer your bank details. Send any correspondence to the FBI, the United States Postal Inspection Service, the U.S. Secret Service, or the FTC.
Fake Shopping Websites and Formjacking
Thousands of fake websites offer great deals on well-known brands. These websites typically have URLs similar to the brands they try to mimic, such as Amaz0n.net. If you buy something from one of these websites, you’ll probably receive a counterfeit item in the mail or nothing at all.
Formjacking is another retail scam. This happens when a legitimate retail website is hacked, and shoppers get redirected to a fraudulent payment page where the scammer steals your personal and credit card information.
- How to avoid them: To avoid this scam, double-check that the URL on the payment page is the same as the website where you were shopping. Cybercriminals may change the URL very slightly. They may do this by adding or omitting a single letter from the URL. Be sure to take a close look at the URL before you enter your payment details.
Travel Scams
One travel scam involves social media. Scammers post enticing photos on sites like Pinterest, X platform (Twitter), and Instagram to dupe even the savviest travelers. Upon clicking on the image, which lures you in through the promise of a free trip or plane tickets, you’ll be prompted to complete a survey rife with personal questions or open your computer to secretly malicious software.
Scammers started selling phony COVID-19 travel insurance policies when travel became difficult. These policies claimed to cover losses for any reason at no extra charge. Buyers found out the hard way that these policies didn’t provide the protection they expected. In general, claims due to “known, foreseeable, or expected events, epidemics, government prohibitions, warnings, or travel advisories or fear of travel” aren’t covered by travel insurance policies.
Although some of these scams may have died down, there’s a chance that they may still be operating. The following table highlights some of the most common COVID-19 scams that have appeared online:
| Fake Health Organizations | Scammers pose as health authorities like the World Health Organization and U.S. Centers for Disease Control to offer cures, tests, or other COVID-19 information. |
| Websites That Sell Fake Products | These sites offer face masks, hand sanitizer, disinfectant wipes, and other high-demand products that never arrive. Buy products from known marketers only. |
| Bogus Government Sources | These scammers claim to issue updates and payments on behalf of the Internal Revenue Service (IRS) or local tax authorities. |
| Fraudulent Financial Offers | Scammers may pose as banks, debt collectors, or investors with offers designed to steal your financial information. |
| Fake Nonprofit Donation Requests | Many people like to donate to charitable causes to help with disaster relief. This provides an excellent opportunity for scammers to set up fake nonprofits, hospitals, and other organizations to collect funds. Donate directly through a reputable nonprofit’s website instead of clicking on a link you receive by email or text. |
- How to avoid them: Make sure the social media page you’re on is an accredited account. All major airlines and travel sites link directly to their social media handles from their respective web pages.
Preapproved Notice
You receive a letter or an email declaring that you have been preapproved for a credit card or a bank loan. Those experiencing financial strain may fall victim to this scam, which promises instant approval and appealing credit limits. The catch? You have to pay an upfront fee when you sign up. While credit card companies do charge annual fees, they never ask you to pay them when you apply.
- How to avoid them: Be wary of any offer that has a 100% guarantee, requires any upfront fees, or requests payments in cash, money transfers, or gift cards.
Debt Relief and Credit Repair Scams
Individuals who are down on their luck can easily fall for an email claiming to relieve their debt or repair bad credit. This scam makes the false promise to negotiate with creditors to either consolidate or settle debts or to remove negative information from your credit report.
According to the FTC, “These operations often charge cash-strapped consumers a large up-front fee, but then fail to help them settle or lower their debts—if they provide any service at all.”
- How to avoid them: Steer clear of any debt relief company that asks for fees in advance before it settles any debt. Likewise, avoid any company that guarantees it can eliminate or reduce your debt by X amount by X date. Research any debt relief or credit repair service you’re considering so you choose a reputable company. It’s a good idea to check with your state’s attorney general and consumer protection agency to learn about the company’s reputation.
Lottery Scams
Congratulations! You’ve won the lottery or some other large amount of money! Except you haven’t. This bogus email comes to you out of the blue—usually claiming to be a part of an international sweepstakes—stressing that you’ve won big and need to send over a processing fee or get in touch with someone who can process your winnings.
- How to avoid them: Unless you have entered some legitimate lottery, chances are you haven’t won the jackpot. When you win the lottery, you contact the appropriate retailer—not the other way around.
Fake Check or Money Transfer Scams
You list something on an auction-based website, and the winning bidder offers to pay you more than the offered purchase price via cashier’s, corporate, or personal check. Upon receiving the scammer’s counterfeit check, you’re conned into sending the difference back through bank wire. Then, you have to pay the bank back in full once the fake check bounces.
- How to avoid them: Never accept payment for more than your selling price. Additionally, you should opt for a secure form of digital payment, such as PayPal or Google Wallet, to ward off scammers.
How to Avoid Internet Scams
Now that you know some of the most common internet scams, it’s important to go over some of the main tips that can help keep you safe, including:
- Never give out your personal information to anyone you don’t know. If you’re unsure, ask questions and get details about the person’s identity. No one from a bank or government agency will ever ask you for your personal or financial information over the phone or online.
- Keep your phone, computer, and digital tools secure. This includes using strong passwords that are difficult to guess. Never allow anyone remote access if you don’t know them.
- Update and change your passwords regularly.
- Arm yourself with virus protection from a legitimate source.
- Don’t click on links in emails or text messages, especially unsolicited ones. Emails sent by scammers might seem legitimate, but look at them with a careful eye. They may contain grammatical errors or typos. The email address may also seem suspicious.
- If it’s too good to be true, then it generally is. Giveaways, lotteries, and promises of free money are most likely scams.
- If you receive a phone call from someone, don’t engage with the caller and hang up.
If you believe you’ve received a scam email or phone call, or if you think you’ve been scammed, contact your local authorities, the FTC, or the FBI and file a report.
What Types of Internet Fraud Are Most Common?
As the internet has progressed over time, the various methods of fraud have grown and evolved. Some of the most common types of fraud include phishing, spyware, identity theft, bank fraud, spam, holiday scams, dating scams, and now even artificial intelligence (AI) scams.
What Is a Typical Online Scam?
One of the most prevalent and successful online scams is phishing. This involves the scammer luring you into providing them with personal information, such as credit card numbers, Social Security numbers (SSNs), or other sensitive information they can use to make purchases, steal your identity, or more. It usually involves emails that look legitimate, such as from your bank or a website you have an account with, stating a problem and requiring your personal information to correct it.
What Do You Do if You’ve Fallen for an Internet Scam?
If you have been a victim of an internet scam, contact the Federal Trade Commission (FTC) at 1-877-FTC-HELP (1-877-382-4357) or file a report online. You can also report to your local police, the Federal Bureau of Investigation (FBI), or the FBI’s Internet Crime Complaint Center.
The Bottom Line
It’s safe to assume that you’re being scammed if anyone asks for your bank or personal information. You should never give out this information to anyone on the internet who contacts you directly. If you have to make a financial transaction online, make sure you’re doing so on a secure server and through a reputable site.
If you believe you’ve been scammed, immediately change all of your passwords, delete any malicious software you may have downloaded, and call your credit card company if necessary. Contact local law enforcement authorities to report the scam and get help with the next steps. You can also report the scam to the Federal Bureau of Investigation (FBI), the Federal Trade Commission (FTC), the U.S. Postal Inspection Service, and your state attorney general’s office.
