How scams work: the playbook behind every con

Four moves, one playbook

Scams look different on the surface (a fake IRS agent, a stranded grandchild, a romantic interest you’ve never met in person, a bank “security” text), but the underlying mechanics repeat so reliably that the FTC’s own consumer-education material boils them down to a short checklist. Learn the pattern once and you can recognize scams you’ve never specifically heard of:

1. Urgency. Act now, before you have time to think or check. A real emergency from a real institution almost never depends on you skipping the next five minutes.
2. False authority. The caller claims to be the IRS, a bank fraud department, a police officer, a grandchild, or a trusted platform, borrowing an identity that makes questioning feel risky.
3. An unusual payment demand. Gift cards, wire transfers, cryptocurrency, or a payment app to a stranger. No legitimate government agency, bank, or utility asks for gift cards as payment. Scammers prefer these because they are nearly impossible to trace or reverse.
4. Isolation. “Don’t hang up.” “Don’t tell your spouse.” “Keep this confidential.” Every scam works harder to keep you from a second opinion than it does to make its story airtight, because a second opinion is usually all it takes to break the spell.

Proverbs 21:5 pictures haste as the road to want, and patience as the road to plenty: the exact tradeoff a scammer is trying to force. Building in a pause is not paranoia; it is the single most effective defense there is.

Current common types

• Imposter scams: someone impersonating a government agency, a well-known company, or a relative. In 2026, the FTC reported imposter-scam losses had climbed to $3.5 billion for the prior year, with a sharp rise in fake toll-payment texts spoofing real programs like E-ZPass and FasTrak.
• Romance scams: a relationship built over weeks or months through messaging apps, ending in requests for money for a supposed emergency, travel cost, or investment “opportunity.” For 2025 the FTC reported romance-scam losses of roughly $1.48 billion, about $2,020 per person who reported one.
• Grandparent scams: a caller claiming to be a grandchild in trouble (arrested, hospitalized, stranded abroad), pressuring an older relative to wire cash or hand it to a courier immediately, sometimes now using AI-cloned voices to sound convincing.
• Phishing: emails or texts impersonating a bank, employer, or utility, aiming to harvest passwords or account numbers through a fake link; the FTC notes email remained the top scam contact method in recent data.

Wolves in sheep’s clothing: affinity fraud

Jesus’s warning about false prophets “in sheep’s clothing” (Matthew 7:15) is not primarily about finance, but it names the exact shape of one of the costliest scam categories: affinity fraud. The SEC’s Office of Investor Education defines it as fraud that targets members of an identifiable group, often a religious community, using a trusted insider, sometimes a respected member or leader of the group itself, to vouch for a fraudulent investment. The betrayal is structural: the con works precisely because church members extend to a fellow believer the trust they would withhold from a stranger, and because “he’s one of us” quietly substitutes for actual due diligence. The SEC’s guidance comes to this: an investment recommendation is not more trustworthy because it comes through a Bible study, a small group, or a pulpit endorsement. Verify that anyone offering an investment is a registered professional through SEC.gov regardless of who introduced you, and be especially skeptical of “steady,” unusually high returns promised inside a community where questioning feels socially costly. The same dynamic sells “opportunities” that are not investments at all; see predatory products on MLM recruiting.

What to actually do

When any of the four moves shows up (urgency, authority, unusual payment, isolation), stop and verify independently: hang up and call the institution back using a number you looked up yourself, not one given to you on the call. Talk to a spouse, friend, or pastor before sending anything. No legitimate request is destroyed by a 24-hour delay. Then report what happened at ReportFraud.ftc.gov. The FTC says a report is shared with over 2,000 law enforcers, and that it cannot resolve an individual report; the reports still feed the cases it brings. Continue to protecting your identity and accounts for what to lock down before a scammer ever calls, and after money has already moved.

Practice spotting the four moves in real scenarios →

Try it yourself: open the interactive tool for this lesson.