Scammers are constantly finding new ways to target people through text messages, phone calls, emails, and social media. The good news is that a few simple habits can help protect your money and personal information.

Scammers often impersonate trusted organizations and create a sense of urgency. Common signs of impersonation include generic greetings like “Dear Customer,” urgent threats or warnings such as “Act now or your account will be closed,” requests for immediate action, and messages that contain slight errors in spelling or grammar. Recognizing these signs can help you spot a scam before you become a victim.

Example: You receive a text claiming your bank account has been locked and asking you to click a link immediately. Instead of clicking, contact your bank directly using the phone number on your debit card or the bank’s official website.

Be cautious when someone asks for passwords, account numbers, verification codes, or other personal details. If you have already shared sensitive information by mistake, act quickly to protect yourself. Change your passwords immediately, contact your bank or the relevant organization to alert them, and monitor your accounts for any suspicious activity.

Example: A caller claims to be from a government agency and says you must provide your Social Security number to avoid a penalty. Legitimate agencies generally do not make unsolicited calls demanding personal information.

Fraudulent links and attachments can steal information or install malware on your device.

Example: You receive an email saying a package delivery failed and includes a link to “reschedule.” Before clicking, visit the shipping company’s website directly and check your tracking information there.

Scammers rely on fear, urgency, and curiosity to trick their victims. Taking a few extra moments to verify information, protect your personal data, and avoid suspicious links can help keep you and your finances safe.

If you do fall for a scam, act quickly: contact your bank or credit card provider to report any unauthorized activity and change your passwords. You can also report the incident to the appropriate authorities, such as the Federal Trade Commission or your local law enforcement agency. Acting fast can help minimize potential damage.