Every week, someone I know gets hit by a scam. Last month it was my uncle clicking a fake PayPal email. Before that, a colleague nearly sent $3,000 to someone pretending to be their boss. The scams are getting better, and that’s the scary part.

We’re past the era of Nigerian prince emails with obvious spelling errors. Modern scams look professional. They use real logos, proper grammar, and psychological tricks that work on smart people who think they’d never fall for it.

The Usual Suspects

Phishing emails have evolved. They’ll reference recent purchases you actually made. They’ll use your real name. The urgency is always there—your account will be closed, a package can’t be delivered, unusual activity detected. The goal is to make you click before you think.

Look at the sender’s actual email address, not just the display name. Hover over links before clicking. If it says it’s from your bank, don’t click the link—go directly to the bank’s website yourself.

SMS scams are everywhere now. “Your parcel is waiting, click here to reschedule.” “Toll charges unpaid for your vehicle.” They work because we get legitimate texts like this all the time. When in doubt, contact the company directly through their official channels.

Romance scams destroy people financially and emotionally. They build relationships over months, then an emergency happens. They need money for a plane ticket, medical bills, business opportunity. The ACCC’s Scamwatch has heartbreaking stories and good prevention advice.

The New Tricks

AI voice cloning is terrifying. Scammers can create a convincing voice clone from a few seconds of audio—maybe from a video you posted online. They’ll call pretending to be your family member in trouble. The defense? Create a family code word. Something you’d never post online that confirms identity.

Investment scams on social media use fake celebrity endorsements. That video of a billionaire talking about their crypto strategy? Deep fake. The testimonials? Fabricated. The investment opportunity? Gone the second you send money.

Remote access scams have someone call claiming to be from tech support. They’ll say your computer is infected, they’ve detected suspicious activity, they need access to fix it. Real tech companies don’t call you out of the blue. Ever.

What Actually Works

Two-factor authentication on everything that matters. Yes, it’s annoying. It’s also one of the most effective defenses you have. Use an authenticator app rather than SMS when possible—SIM swapping attacks are real.

Pause before acting. Scammers rely on urgency. The deal expires in an hour. The account closes today. Your loved one needs help now. Take a breath. Verify through another channel. Real emergencies can wait five minutes for verification.

Check URLs carefully. That banking site might be your-bank.com.secure-login.net instead of your-bank.com. The extra words should trigger alarm bells. Bookmark your important sites and use those bookmarks rather than clicking links.

Be skeptical of too-good offers. That job that pays $80/hour for simple data entry? Scam. The investment returning 20% monthly? Scam. The designer handbag for 90% off? Probably a scam. If it seems too good to be true, it is.

When You’re Not Sure

Google the message you received along with the word “scam.” Someone else has probably encountered it and posted about it. Check Scamwatch. Ask a tech-savvy friend.

For business emails requesting money or information, verify through a different communication method. If your “boss” emails asking for an urgent wire transfer, call them. Use a number you already have, not one provided in the suspicious email.

If You’ve Been Scammed

Report it immediately. Contact your bank if money was involved. File a report with IDCARE if personal information was compromised. Report to Scamwatch. Yes, you might feel embarrassed, but reporting helps prevent others from falling for the same scam.

Change passwords for any accounts that might be compromised. Monitor your bank statements and credit reports. The first 48 hours matter most for damage control.

The Mindset Shift

Stop thinking “I’m too smart to fall for scams.” That’s exactly the mindset scammers count on. Smart people fall for scams when they’re tired, distracted, or emotional.

Instead, think “I’m aware this is possible, and I’ll verify before acting.” That’s not paranoia. That’s being realistic about the internet in 2025.

The scammers are professional. They test their approaches. They refine their techniques. They know psychology. You’re not competing against amateurs, and there’s no shame in taking precautions.

Stay suspicious. Stay safe.