Is It a Scam? The Five-Feature Checklist (2026)

Updated August 3, 2026. Quick answer: almost every financial scam has at least one of five features. You do not need to recognise the specific scam — you need to notice the shape. If any one of these is present, stop and verify through a channel the other person does not control.

The five

1. Urgency that punishes checking

A deadline measured in hours, a consequence that lands if you pause, a reason you cannot call back. Legitimate institutions survive you hanging up and calling the number on your statement. Any arrangement that cannot survive a callback is the callback’s answer.

2. Secrecy

Being told not to tell your family, your bank, or your adviser. Fake gag orders, confidentiality for an “investigation”, embarrassment. Isolation is not a side effect of these frauds; it is the mechanism. No legitimate process requires you to hide a financial decision from the people closest to you.

3. An unusual payment method

Wire transfer, cryptocurrency, gift cards, cash to a courier, cash in the post, a payment app to someone you have not met. These share one property: they are fast and effectively final. That is why they are asked for. A consumer wire sits outside the main federal error-resolution rule entirely — why that matters for recovery.

4. They contacted you

The call, message, email or friend request came to you unsolicited. This one feels weak and is the strongest predictor in the list. It applies even when the caller ID is right, even when the logo is right, and even when the name and credentials check out — especially then.

5. You must pay to receive money

A fee to release a prize, tax to withdraw your own investment gains, a charge to recover funds you already lost. Real money owed to you arrives net of what you owe. Nothing legitimate requires you to send money out in order to get money in. This single line catches lottery scams, the withdrawal stage of an investment fraud, and the recovery fraud that targets victims a second time.

The one move that answers all five

Verify through a channel the other person did not give you. Not the number they provided, not the link they sent, not the website they named. The number on your own statement. The relative’s number already in your phone. The regulator’s site typed in yourself.

Every scam in this list survives only inside a channel the scammer controls. Stepping outside it does not require you to identify the fraud, argue with anyone, or be technical.

Three things worth doing before anything happens

• Agree a family code word. The FBI recommends it, and it answers the voice-cloning problem in five seconds. Why recognition stopped being a safeguard.
• Name a second pair of eyes for any transfer above a figure you choose now. Not permission — just a conversation you have agreed to have with yourself in advance.
• Decide today that you will never act on an inbound contact. Not “be careful”. A rule: inbound contact never leads to a payment in the same session.

If something has already happened

Speed is the only remaining variable. The order to work in — the bank first, within hours, then the reporting routes.

And the thing worth saying plainly: being deceived is not a character flaw. These operations are run by organised groups, rehearsed, and aimed at whoever answers. The people who lose the most are frequently the ones who were most careful about everything else — because careful people follow procedures, and a good scam is a procedure.

What the reported numbers show · when the risk is someone with legal authority.

General information drawn from federal regulator and law-enforcement publications, not legal or investment advice. This page describes patterns reported by regulators; it does not accuse any company or person of wrongdoing. Sources and read dates are given so you can check them yourself.