Scams don’t look like scams anymore. Here’s what to watch for

# What's changed in scams Scams used to be easy to spot: poor spelling, weird addresses, or absurd promises. Those signs still appear sometimes, but they're no longer the whole story. Fraudsters now design messages to match things you expect to see — a delivery update, a bank alert, or a colleague's request — and then prompt you to react quickly.

# How they work Rather than trying to convince you of a fantastical payoff, scammers create a believable situation and introduce a small problem or opportunity that seems ordinary. Examples in the reporting include a fake parcel notification that drops on the same afternoon you're waiting for a delivery, or a banking message claiming a questionable transaction and asking you to "investigate." The goal is to get you to act before you have time to verify.

# The main warning signs

• Pressure to act immediately. Any message that demands instant action to avoid a consequence or to secure an opportunity should raise an alarm. That pressure is the tactic that short-circuits careful thinking.
• Unexpected requests for sensitive actions. Be wary when a communication asks for passwords, financial details, authentication codes, or to install software or grant remote access. Requests to scan unfamiliar QR codes or move a conversation to a different platform are also red flags.

# What to do instead of clicking

The safest response to an unusual request is to step outside the conversation and verify it independently. That extra minute is the exact thing scammers want you to skip.

# Practical checklist to follow immediately

• Pause when you feel rushed.
• Don't use provided links or phone numbers to verify.
• Independently open the official app or website, or call the person with a trusted number.
• Refuse to install software, grant remote access, or scan an unknown QR code without verification.
• If a payment destination changes, verify via your established contact method before sending money.

# Bottom line Scams now rely on fitting into ordinary moments and prompting fast reactions. Your best defense is deliberate verification: step out of the interaction, use trusted channels, and treat unusual requests as suspicious even when they look familiar.