Scam Pattern Library

Fake texts claiming you owe a small toll fee with a link to a spoofed payment site. The top new scam of 2025, up 900% in one year. The small dollar amount ($3-$12) is intentional — it feels believable and not worth questioning.

Fake texts or calls claiming to be from the IRS, SSA, DMV, or other government agencies, threatening arrest, legal action, or benefit suspension unless you pay or provide personal information immediately. Government impersonation losses hit $789M in 2024, and older adults losing $10K+ increased four-fold since 2020.

Fraudulent texts or emails from fake USPS, FedEx, UPS, or Amazon accounts claiming a package can't be delivered, needs rescheduling, or requires a small redelivery fee. The #1 most-reported text scam narrative in 2024 per FTC Data Spotlight (April 2025). $470M reported lost in text-contact fraud, with $1,000 median loss per victim.

Fake urgent alerts appearing to come from your bank about suspicious activity, locked accounts, or failed transactions. Bank impersonation is the #1 most common text scam type, accounting for 10% of all smishing messages according to the FTC.

Scammers build fake romantic or friendly relationships over weeks or months, then steer victims toward fraudulent cryptocurrency investment platforms. The DOJ has seized $580M+ in crypto tied to these operations. Global losses reached $17B in crypto scams in 2025, with pig butchering as the dominant scheme.

Pop-ups, emails, or calls claiming your device has a virus or that a subscription (Geek Squad, Norton, McAfee) is auto-renewing for hundreds of dollars. Scammers gain remote access to your computer to steal data or demand payment for fake services. Geek Squad/Best Buy is the most impersonated brand in the US according to FTC complaint data.

Malicious QR codes placed over legitimate ones on parking meters, restaurant menus, EV chargers, and in phishing emails. 26% of all malicious links are now delivered via QR code, and 73% of Americans scan codes without verification. Because QR codes hide the URL, they bypass the most basic scam detection: checking the link before clicking.

Scammers use AI to clone the voices of family members, executives, or authority figures from just seconds of audio. Voice cloning has crossed the 'indistinguishable threshold' — clones now include natural breathing, pauses, and emotion. Deepfake-as-a-service platforms make this accessible to anyone for under $2. Global losses exceeded $200M in Q1 2025 alone.

Fake job listings or messages offering high-paying remote work, then requiring victims to pay for equipment, training, or 'activation fees.' A newer variant involves gamified 'task' scams where victims complete simple online tasks (liking videos, rating products) and must pay crypto deposits to 'unlock' higher-paying tiers. Job scam reports tripled from 2020-2024, with losses jumping from $90M to $501M.

Fake IRS emails or texts about unclaimed tax refunds, stimulus payments, or tax credits directing victims to phishing sites that harvest Social Security numbers, banking details, and other PII. Tax-related scams cost an average of $8,199 per person in 2024.

Scammers impersonate your electric, gas, or water company, threatening immediate disconnection unless you make an emergency payment — typically via gift cards, wire transfer, or cryptocurrency. They spoof caller ID to display the real utility's number and even replicate hold music and IVR menus.

Promises of unusually high, risk-free returns on investments — often through social media ads, Telegram groups, or messaging apps. Investment fraud caused the highest dollar losses of any category at $5.7B reported to the FTC in 2024 (24% increase YoY). Many use fake trading platforms with fabricated dashboards.

Scammers notify victims they've won a major sweepstakes or lottery they never entered, demanding upfront payments for fabricated taxes or processing fees. $351M in reported losses in 2024 (FTC), with 80% of money lost coming from consumers over 65 (BBB). Older adults 80+ face median losses of $1,650 per incident.

Scammers impersonate executives, vendors, or attorneys via email to trick employees into wiring money or redirecting payments. $2.77B in losses across 21,442 complaints in 2024 (FBI IC3) — the 2nd highest loss category. The 'Scripted Sparrow' group alone sent 6.6M automated BEC emails in September 2025.

Scammers threaten to release intimate images or fabricate compromising material unless victims pay — increasingly targeting teenagers through social media. 54,936 complaints filed with IC3 in 2024 (59% increase from 2023), with $33.5M in reported losses. NCMEC receives nearly 100 reports per day of financial sextortion targeting minors, and at least 36 teenage boys have died by suicide since 2021.

Scammers exploit Facebook Marketplace, Craigslist, OfferUp, and peer-to-peer payment apps (Zelle, Venmo, CashApp) to steal money through fake listings, overpayment schemes, and non-delivery fraud. FTC reported $113M+ in P2P-specific losses in 2024 with ~$4,500 average loss per victim. $1.9B total in social media-originated scam losses in 2024.

Scammers post fake rental listings using stolen photos from real properties, collect security deposits and first month's rent, then vanish. IC3 logged 9,359 real estate/rental complaints with $173.6M in losses in 2024. Half of rental scam reports to the FTC in 2025 started on Facebook.

Fraudulent charities and crowdfunding campaigns exploit natural disasters, mass casualty events, and humanitarian crises to steal donations. FBI IC3 received 4,500+ complaints with $96M in losses in 2024. Scammers spin up fake charities within hours of major disasters.

Scammers target people who already lost money to a previous scam — especially crypto investment and romance fraud victims — offering to 'recover' their stolen funds for an upfront fee. FBI received 100+ reports between Dec 2023-Feb 2025 of scammers impersonating IC3 officials. Over $333M stolen through crypto recovery scams in 2025.

Criminals use physical tampering and social engineering to drain gift cards, either by tampering with packaging in stores or pressuring victims to purchase cards and share codes. This fraud has caused over $212 million in losses in 2024 alone, with two primary attack vectors operating in parallel.

Scammers send seemingly misdirected text messages that initiate conversation with victims. After gaining trust over days or weeks, they steer conversations toward cryptocurrency investment schemes or romance scams, exploiting a technique known as 'pig butchering.' This is the #1 entry point for a $4.57 billion investment fraud ecosystem run from Southeast Asian compounds.

Fraudulent companies impersonate government agencies or legitimate loan servicers, promising guaranteed student loan forgiveness or discharge in exchange for upfront fees. The FTC has recovered over $4.5 million for 34,000+ victims in 2024-2025, with scam activity spiking each time new legislation or relief programs are announced.

Scammers impersonate Medicare representatives or insurance agents during annual enrollment periods, claiming coverage is expiring or that new benefits are available. They steal Medicare IDs for identity theft, or 'slam' victims into alternative plans without informed consent, generating fraudulent commissions. During 2024 alone, the Centers for Medicare & Medicaid Services received 183,553 unauthorized enrollment complaints.

Scammers gain control of your social media accounts through phishing links, fake security alerts, or by tricking you into sharing 2FA codes. Once inside, they impersonate you to friends, post fake investment offers, or sell nonexistent items to your followers.

Scammers impersonate government agents or tech support and convince victims to withdraw large amounts of cash from banks, then deposit it into cryptocurrency ATMs using QR codes that send the money directly to the scammer's wallet. The scammer stays on the phone throughout to maintain control and prevent the victim from seeking help.

Victims are lured with promises of easy work-from-home jobs like rating products or liking videos for $100-$500 per day via unsolicited texts. A fake professional dashboard shows earnings and initial payouts build trust, but then victims are pressured to deposit their own money to unlock premium tasks or clear fake negative balances, with deposits escalating until their money runs out.

Scammers cold-call timeshare owners claiming to have buyers willing to pay premium prices, then demand upfront fees for taxes, escrow, or cross-border charges before the sale can close. If victims stop paying, scammers return weeks later posing as lawyers or government officials offering to recover lost money—for yet another fee.

Criminals weaponize stolen personal data from major breaches to launch targeted phishing attacks and create unauthorized accounts in your name. After a company breach exposes your SSN, email, or card details, scammers use this information to craft convincing emails, perform credential stuffing, or commit synthetic identity fraud. This pattern represents one of the fastest-growing threats, with over 1.1 million identity theft reports in 2024 alone.

Credit card fraud occurs through payment card skimmers at gas pumps and ATMs, card-not-present online theft from breached databases, and card testing schemes, while check fraud involves stealing mail and using chemical techniques to erase payee information and rewrite amounts. These are among the most common fraud types, with credit card fraud remaining the leading identity theft vector and check washing representing a growing threat to personal finances. Unlike many scams requiring victim interaction, card skimmers and check theft are passive crimes.

Criminals create fake romantic profiles on dating apps, social media, and messaging platforms to build emotional connections with victims over weeks or months. Once trust is established, they manufacture a crisis (medical emergency, business problem, travel fees) and request money. Romance scams caused $672 million in reported losses in 2024 (FBI IC3), with median losses around $2,000 per victim, and often cause severe emotional trauma alongside financial devastation.