Practical guide
Phishing, fake shops, suspicious phone calls, fake investments, and unsolicited contracts: a clear guide to stopping, verifying, and protecting your data, money, and identity.
First thing to do
Scams work because they create pressure: a blocked account, a stuck package, an unmissable discount, an insurance policy that needs to be paid immediately. The best defense is to interrupt the process: close the message, don't use the link received, and verify on the official website or with a trusted number.
Useful tools
Quick Index
A scam can come from a website, an email, a text message, a call, or a social media ad. The channel varies, but the mechanism is almost always the same: apparent trust, urgency, request for information, or a non-reversible payment.
Phishing is an email that impersonates banks, couriers, payment platforms, government agencies, or well-known services. The message prompts you to click a link to confirm a payment, unlock an account, receive a refund, or avoid a suspension. The link takes you to a clone page where the data you enter is collected by scammers.
Smishing is phishing via SMS or WhatsApp. The most common cases involve packages to be unlocked, fines, tolls, suspicious logins, bonuses, refunds, or bank accounts to be confirmed. The message is short and aims to get you to click before you can think straight.
In vishing, the scammer calls pretending to be a bank, police, IT technician, anti-fraud consultant, or telephone operator. The number displayed on the screen may be spoofed: seeing a known number isn't enough to make the call secure.
Fake shops are fake or unreliable online stores. They may not ship anything, ship products other than those ordered, or disappear after a few days. They often use elaborate graphics, copied catalogs, and very aggressive discounts to appear real.
The payment method is one of the most important signals. Fraudsters prefer methods that are difficult to block or dispute: instant bank transfers, top-ups, prepaid cards, cryptocurrencies, gift cards, or payments to inconsistent cardholders.
Investment scams promise quick profits, guaranteed returns, or the recovery of lost money. They often start with social media ads, phone calls, WhatsApp groups, or fake profiles posing as advisors. Initially, they show fictitious profits, then ask for further payments for fees, account unlocking, or commissions.
In the energy, telephony, and recurring services sectors, consumers may be pressured to provide personal information, POD, PDR, tax code, or customer code. This data can be used to activate unsolicited contracts or switch providers without their informed consent.
Artificial intelligence makes scams more credible: error-free emails, perfect translations, cloned websites, imitated voices, fake videos, and personalized chats. This means it's no longer enough to simply look for grammatical errors or poor graphics.
Final checklist
If there's an emergency, slow down: it's the scammers' first tool.
Use official channels, not links or numbers received in the message.
OTP, PIN, password and card details should never be shared.
Avoid wire transfers and top-ups to strangers. Prefer reversible payments.
If you have any concerns, report the incident or contact a consumer association.
Have you ever received a suspicious message?
ShopSicuro can help you verify suspicious websites, phone numbers, QR codes, terms of sale, and emails via a browser extension.
