Is this a scam?

Whether something feels off right now or you're going back over what already happened — the warning signs are the same. Read the groups below. You don't need a perfect match; if several apply, treat it as a scam and act on that.

Did they tell you to keep it secret?

That alone is enough. Real institutions never ask you to hide anything from your family, your bank, or the police. Tell someone you trust right now.

Five groups of warning signs, in plain language. Tap any heading to collapse a group you've already read.

•They contacted you first — a call, text, email, or message you didn't ask for.
•The caller ID or email looks almost right, but slightly off.
•A pop-up on your screen told you to call a number.
•Someone you only know online eventually brought up money.

•They asked you to pay with gift cards.
•They asked you to pay with cryptocurrency, or at a crypto ATM.
•They asked you to wire money, or send it by Zelle, Venmo, or Cash App.
•They asked for your passwords, card numbers, SSN, or a texted code.
•They asked for remote access to your computer or phone.

•They said you must act right now, or something bad will happen.
•They threatened you — arrest, a lawsuit, losing your account or benefits.
•They told you to keep it secret from your family, your bank, or police.
•They stayed on the phone and didn't want you to hang up.

•You won a prize you don't remember entering — but must pay a fee to collect it.
•You were promised unusually high or guaranteed investment returns.
•You were told you owe money — a tax, a debt, a fine — that you don't recognize.
•You were told to confirm your details to fix an account, package, or payment problem.
•You were 'overpaid' and asked to send some of the money back.
•A message claimed a relative was in sudden trouble and needed money fast.

•A 'government agency' demanded payment or threatened arrest. Real agencies never do this.
•Your 'bank' asked you to move money to a 'safe account.' Banks never ask this.
•'Tech support' said your device was infected and needed fixing.
•A company you know contacted you in a way it normally doesn't.

If several of these apply

Then this is almost certainly a scam. You do not need to be certain, and you do not need to confront the other person to find out. The safest move is to stop, step back, and check independently — the next steps depend on whether money or information has already left your hands.

If you haven't paid yet — do this now

Stop responding. Hang up, stop replying. You don't owe them a goodbye.
Don't pay or share anything — no codes, card numbers, or remote access — whatever they threaten.
Verify yourself. Look up the real number — on your card, a statement, the official website — and call that. Never a number or link they gave you.
Take your time. Anyone who can't survive you hanging up to check is telling you what they are.

Already paid, or shared a code, password, or card number? Then this moves from prevention to recovery, and some steps have deadlines measured in hours. Start the recovery steps.