Help & guides

Types of Phishing Scams

Phishing is a trick used to steal information, money, or access to an account. It often starts with a message that looks helpful, urgent, or familiar. Phishing sounds like fishing. The message is the bait. This guide explains common versions and safer ways to respond.

A message can use more than one trick. Real names, correct spelling, a familiar logo, or a familiar voice do not prove it is genuine. The examples below are made up.

Last reviewed

Read the crypto scam guide

Start with a pause

  • Do not let an urgent message rush you into sending money.
  • Check through an official app or contact details you already trust.
  • Keep passwords and security codes private.

Helpful words

Link
Text or a button that opens another page. Its label may hide where it really goes.
Attachment
A file included with a message. Some files can install harmful software.
Spoofing
Making a message, website, or caller ID look as if it came from someone else.
One time code
A short-lived security code used to confirm an action or sign-in. Do not share it with a caller or chat contact.

Common scam types

Copied message or shared file scam

A scammer copies a real message or uses a real online file service to deliver a harmful link. The sender account may have been taken over.

Example A familiar contact resends an invoice with a different payment link.

Safer step Check unexpected changes with the contact before opening files or paying.

Back to contents

Email phishing

An email pretends to come from someone you trust. It tries to make you open a link or attachment, reveal information, or send money.

Example A message says your bank account will close unless you sign in through its link.

Safer step Open your banking app yourself instead of using the message link.

Back to contents

Fake invoice or payment change

A message asks you to pay a bill or changes the bank details for a real payment. A scammer may be using a stolen business email account.

Example A supplier email asks you to send the next payment to a new bank account.

Safer step Verify the change by calling a previously known contact number.

Back to contents

Fake sign in page

A website copies the look of a trusted service to collect your login details. A link in a message, advertisement, or search result may lead there.

Example A shared document opens a page that asks for your email password.

Safer step Use a saved bookmark or the official app to sign in.

Back to contents

Fake support alert

A message or pop-up says your device has a virus or an account has been hacked. It directs you to fake support, a download, or remote-control software.

Example A warning tells you to call a number and let an agent control your computer.

Safer step Close the message. Contact trusted support independently if you need help.

Back to contents

Phone call phishing

A caller tries to talk you into sharing secrets, sending money, or changing account settings. This is sometimes called vishing. Caller ID can be faked.

Example A caller says they are your bank and asks for a code sent to your phone.

Safer step Hang up. Call the number on your bank card, using a different device if needed.

Back to contents

QR code phishing

A QR code is a square pattern your camera reads to open a link. A scam code can lead to a fake login or payment page. This is also called quishing.

Example A sticker placed over a parking payment code sends you to a fake site.

Safer step Use the official parking app or payment instructions you can independently verify.

Back to contents

Social media or chat phishing

A message arrives through a social network or chat app. It may come from a copied profile or an account that was taken over.

Example A friend sends a message asking whether you appear in a linked video.

Safer step Check with the person through another trusted channel before opening the link.

Back to contents

Targeted phishing

A scam message uses details about you to sound genuine. It may mention your workplace, relatives, purchases, or a recent event. The technical name is spear phishing.

Example An email names your manager and asks you to open a shared payroll file.

Safer step Confirm the request through a separate contact method you already trust.

Back to contents

Text message phishing

A text asks you to act on a fake delivery, toll, payment, or account problem. This is also called smishing.

Example A text asks for a small redelivery fee and your card details.

Safer step Check through the company website or app you normally use.

Back to contents

Verification code theft

Someone asks for a one-time code, password-reset link, or sign-in approval. They may already know your password and need this last step to get in.

Example A caller says to read a security code aloud to cancel a fraudulent transfer.

Safer step Do not share the code or approve a sign-in you did not start.

Back to contents

Voice or video impersonation

A scammer uses a copied voice, altered video, or made-up recording to impersonate someone. These methods can strengthen a phone or message scam.

Example A familiar-sounding voice says a relative needs money urgently and asks you to keep it secret.

Safer step Call the person on a known number or check with another trusted relative.

Back to contents

If you think you were scammed

You are not alone. Scams are designed to deceive. Acting promptly can help limit further harm, but recovery is not guaranteed.

  • If you are unsure, stop and check. Open the official app or contact the organization using details you already trust. Do not use the message link or callback number.
  • If you shared a password or approved a sign-in, use a trusted device to change the password. Change it anywhere else you reused it. Review account activity and ask the provider about ending other signed-in sessions.
  • If you shared a bank or card detail or sent money, contact your financial provider promptly through a trusted number. If you shared identity details, visit IdentityTheft.gov for guidance.
  • If you downloaded a file or allowed remote access, stop sensitive work on that device. Disconnect an active remote-support session and seek trusted technical help. Keep your security software updated.
  • Save the message and relevant receipts without opening more links. Report through your email or messaging app. In the United States, use ReportFraud.ftc.gov or IC3.gov for fraud reports. Outside the United States, use your local reporting authority.

About this guide

This is general education, not a finding about a particular person or company. A Scam Case Builder result cannot guarantee safety or recover lost money. Ask someone you trust to help you check a worrying request.

For questions or corrections, contact support@techtoolsdirect.com. Do not email passwords, security codes, wallet recovery words, or identity documents.

Sources and further help

Official consumer guidance checked on 28 October 2026. These organizations do not endorse Scam Case Builder. Select a source title to open it.

Back to contents · All help and guides