Skills books › Staying Safe Online

How to spot a scam: the red-flag checklist

A scam is a feeling before it is a message. Scammers copy logos, names, numbers and even voices, so you cannot always spot a fake by looking at it. But you can always check it another way. When you feel rushed, frightened, flattered or excited, check through a number or app that you already trust, not the one in front of you.

The feelings that scams use

• Fear: "Your account will be closed." "Your son has been arrested."
• Urgency: "within 24 hours", "act now or lose it".
• Greed or hope: a prize, a cheap phone, a job, an investment that doubles your money.
• Trust in authority: the bank, SARS, the police, a courier or a well-known company.
• Kindness: a person in trouble, or a "mistake" that you can fix.
• Secrecy: "Don't tell anyone."

When a message pulls on one of these feelings and asks you to do something, slow down. The stronger the feeling, the more careful you need to be.

Fake messages and calls

Phishing is a message that pretends to come from someone you trust, to get you to click, log in, pay or share. It also arrives by SMS and by phone call. A common version is a courier message asking for a small "redelivery fee" or "customs fee" through a link.

A caller who says "move your money to keep it safe" or "don't tell the bank" is always a scammer. Hang up and contact the bank yourself, on the number on your card or in its app.

When a "friend" asks for help

Criminals often pretend to be someone you know:

• a friend's hijacked WhatsApp or Facebook account asks everyone for R2 000 "until tomorrow", or for "the code I sent you by mistake";
• a new number claims to be your child: "Hi Mum, this is my new number, my phone broke";
• a "boss" asks for an urgent payment or gift vouchers.

Phone the person on the number you already have saved, or ask a question that only they could answer. A real friend will not mind. A criminal will make excuses.

AI voice clones and fake videos

Artificial intelligence can copy a person's voice from a few seconds of a voice note or video. Scammers use this to phone a parent or grandparent in a child's voice, crying, and then hand over to a "lawyer" or "police officer" who asks for money. They also make videos of well-known people "recommending" investments.

Agree a family code word that is never posted online. If anyone calls in an emergency asking for money, ask for the code word. Then hang up and call the person on their saved number. A familiar face or voice is no longer proof.

The red-flag checklist

Before you reply, click, pay, install or share, check:

• It came to you. You did not start the contact.
• It is urgent, with a deadline or a threat.
• It plays on a strong feeling.
• It asks for a code, PIN, password or card details.
• It asks you to pay in an unusual way: a voucher, cash send, crypto, or a personal account.
• It asks you to move money to keep it safe.
• It asks you to install an app or give someone access to your phone or computer.
• It asks for secrecy.
• It comes from a new number claiming to be someone you know.
• The link or sender looks slightly wrong.

One red flag is enough to stop and check. With two or more, it is almost certainly a scam.

Report it

Report fake accounts and messages on the platform, tell your bank about fake bank messages, and warn your family and friends.

This guide is based on Chapter 4 of Staying Safe Online, which includes a red-flag card to keep.