# Most scams follow the same script, whatever the story. Knowing what to look for · 02 · 10 min read The caller may claim to be your bank. A new friend may offer an investment. The stories vary, but they keep steering you toward the same place: an action you cannot independently check. This page helps you: - Recognize the pressure tactics most scams share - See how a slower scam builds trust over weeks - Know what to do if a scam already worked The words overlap, but one distinction is useful here. A _scam_ is the story told to get you to act. _Fraud_ is the payment, account use, or impersonation that story produces. This is not a legal definition. It marks the point where a convincing story turns into a concrete loss or record you may need to correct. The story borrows an ordinary instinct. You respond to a familiar name, help someone in trouble, or move quickly when money appears to be leaving. The con then turns that instinct toward a payment, code, login, or document. A single fake message may pull these levers in a few lines. [Spotting a fake message](https://explained.withpersona.com/your-identity-online/fake-messages) shows the clues inside that message. Here, the useful unit is the whole story and where it tries to take you. **Where a scam turns into fraud** 1. Instinct · An ordinary instinct · A familiar name, someone in trouble, money that seems to be leaving. 2. Scam · The story told to get you to act 3. The turn · A payment, code, login, or document 4. Fraud · The loss or record you may need to correct > One of the best defenses against a scam is a habit: notice the pressure, and keep a healthy > skepticism about any request that asks you to act before you can check. ## Watch the con being built One call, line by line. This is the "safe account" scam, a common bank-impersonation pattern. Move through the call one line at a time and watch the invented emergency turn into a transfer request. **The call, line by line** ### Lever 1 of 5 · Authority _This is the fraud prevention team at your bank._ It opens with a name you trust Before anything is asked, the caller borrows your bank’s authority. Caller ID can be faked to match, so the name on your screen is not proof of anything. Authority is what makes the next four moves land. ### Lever 2 of 5 · Fear _We’re seeing payments leaving your account right now that we don’t think you made._ Then it frightens you “Money is leaving your account” gives the caller control of your attention. From that point on, every instruction can sound like part of fixing the invented emergency. ### Lever 3 of 5 · Urgency _We have only a few minutes to stop the next one._ It starts a clock “Only a few minutes” discourages the two checks that would break the story: opening your account yourself or speaking to someone else. A real problem with your account will still be there after you hang up and check. ### Lever 4 of 5 · Secrecy _Please don’t mention this to anyone at the branch; we’re treating a staff member as a suspect._ It cuts you off from help “Don’t tell the branch” cuts off the people who can check the account. A caller claiming to be your bank has no legitimate reason to hide the conversation from that same bank. ### Lever 5 of 5 · The false rescue _To keep your money safe, move it to the new secure account we’ve opened in your name._ Finally, it offers the trap as the cure “Move your money to a safe account” is the transfer the entire story was built to obtain. A legitimate fraud team does not need you to send money to a new account supplied during an unexpected call. End the call and check your account through the bank’s app or the number on your card. The U.S. Federal Trade Commission uses the same bright line: a caller who tells you to move money to protect it is running a scam. [Read the FTC's safe-account warning](https://consumer.ftc.gov/consumer-alerts/2024/03/never-move-your-money-protect-it-thats-scam). ## The pressures repeat across very different stories Across these stories, the same pressures recur. The useful signal is often a combination: authority plus a deadline, affection plus secrecy, or an opportunity that can only be taken through the sender's payment route. **The toolkit, and where the call used it** - **Urgency.** What it does: A closing window, so you act before you can think. In the call above: Used. - **Authority.** What it does: A bank, an agency, a boss. Instructions from them can feel settled before you check. In the call above: Used. - **Fear.** What it does: Your money, your record, or your family put in danger. In the call above: Used. - **Secrecy.** What it does: “Do not tell anyone.” Isolation keeps you from a second opinion. In the call above: Used. - **A too-good offer.** What it does: A prize, a return, a deal that rushes past your doubt. In the call above: Not in this call. - **Affection.** What it does: A new love, or a friend in need. Questioning a request can feel like questioning the person. In the call above: Not in this call. The call used four levers, then offered a false rescue. The slower con below leans on the other two. ## A slower con, over weeks A slower con can build for weeks before money enters the story. When an investment pitch is carried through a new friendship or romance, the approach may unfold over weeks and across several payments. There may be no single dramatic moment. Step through how trust can be turned into an investment request. **The con, stage by stage** ### First contact · The warm open _A kind, interested message from someone new. No request, just conversation._ It starts as something good A friendly message, a match, or a helpful stranger in a group chat can continue for days without a request. The early conversation creates a history that the later request can borrow from. ### Over time · Trust, built patiently _Good-morning texts, long calls, a future discussed. It feels like the real thing._ It becomes a real relationship Daily messages and shared plans create a genuine bond on your side of the conversation. Questioning a later request can then feel like questioning the whole relationship. ### The first ask · The opportunity or crisis _A tip on an investment that’s paying well, or an urgent bill they can’t cover this week._ The first ask arrives, and it’s small A can’t-miss investment they want to share with you, or a sudden emergency only you can help with. The first amount is modest and easy to say yes to. If it is an investment, an early “return” may even be paid back, to prove it works. ### After money moves · The escalation _A bigger request, then another. Withdrawing your “gains” needs one more payment first._ The amounts grow, and leaving feels costly Each ask is larger. Stopping can feel like writing off both the relationship and the money already sent. On a fake investment platform, a withdrawal may trigger a new fee or tax. Money appears to grow on the screen, yet every route out requires another payment. [INTERPOL’s June 2025 global update](https://www.interpol.int/en/News-and-Events/News/2025/INTERPOL-releases-new-information-on-globalization-of-scam-centres) documents industrial scam operations in which people were trafficked and forced to run scripts. That does not make the request safer. It does make charm, warmth, or apparent sincerity poor evidence of what happens to the money. Before sending anything, ask someone outside the conversation to review the payment path with you. The FTC's [romance-scam guidance](https://consumer.ftc.gov/articles/what-know-about-romance-scams) points to the same check: talk to someone you trust, and do not send money to someone you have not met in person. ## A check that works across stories Leave the route the story gave you. Hang up and use the number on your card. Close the message and open the real app. Ask someone outside the conversation to look at an investment before you pay. Each one swaps the route the story gave you for one the scammer does not control. ## What changed hands? If you are reading this because one already got through, what helps next depends on what changed hands or accounts. Some effects can be limited or documented. Others take time and may not be reversible. Choose the closest to find the recovery steps for that kind of loss. Choose what changed hands to see the matching recovery path. ### A payment or bank transfer Call your bank first, then work through recovery by how you paid. Go to [what to do after sending money](https://explained.withpersona.com/your-identity-online/sent-money). ### A password Use the real service from a trusted device. Change that password anywhere you reused it, then review recovery methods and active sessions. Go to [recovering an account](https://explained.withpersona.com/your-identity-online/account-taken-over). ### A sign-in or verification code Open the real service from a trusted device. Change the password, since someone who asks for a code often already has it, then end other sessions and review recent sign-ins. Go to [recovering an account after sharing a code](https://explained.withpersona.com/your-identity-online/account-taken-over). ### Access to one of my accounts Start with the provider’s official recovery process. If a device may be compromised, begin from a different trusted device. Go to [getting an account back](https://explained.withpersona.com/your-identity-online/account-taken-over). ### A card number or payment details Contact the issuer through a number you find independently. Tell it which details someone else may now have and whether any payment appears. Go to [what to do after sharing payment details](https://explained.withpersona.com/your-identity-online/clicked-a-link). ### An app, download, screen share, or device access End the connection. If software ran or control was granted, disconnect that device and use another trusted device for account changes. Go to [the device and remote-access steps](https://explained.withpersona.com/your-identity-online/clicked-a-link). ### An ID image, ID number, address, or other personal details Write down exactly what you shared. The next step depends on the detail, its issuer, and whether any misuse has appeared. Go to [what to do after sharing identity details](https://explained.withpersona.com/your-identity-online/clicked-a-link). ### A new account, record, or impersonation in my name Build one case record, contact each affected provider, and use the reporting and correction routes where you live. Go to [the identity recovery plan](https://explained.withpersona.com/your-identity-online/identity-stolen). ## Before money or access changes hands 1. If a caller claiming to be your bank tells you to conceal the call from the branch, end it. Check the account through the app or number on your card. 2. Make money requests easy to double-check in your household. Agree in advance that anyone can call back or ask another person without it being treated as distrust. 3. If money already moved, contact the bank, card issuer, payment service, or other provider used for the transfer as soon as you can. Then see [what to do if you sent money](https://explained.withpersona.com/your-identity-online/sent-money). Reviewed July 2026. --- _Part of Identity Explained (by Persona). https://explained.withpersona.com/your-identity-online/scams-and-fraud_