Is it a scam? Ask these six questions first

Short answer

Before you do anything an unexpected call, text, email or pop-up asks, answer six questions. If the answer to any of them is yes, stop. Don’t click, call back or pay. Contact the company yourself, using a number you already trust.

Last reviewed October 8, 2026 against the FTC, the FBI’s IC3, Apple, Microsoft and the official reporting services it lists

On this page

Stay safe · page S01

The six questions to ask first

An unexpected call, text, email or pop-up? Before you do anything it asks, answer these six questions.

  1. Did it come out of the blue?

    Even if it seems to be from your bank, a government office, Apple, Microsoft or a relative — names and numbers can be faked.

  2. Is there a problem — or a prize?

    Your account is locked, a package is held, a payment failed, you owe a toll or tax — or you’ve won something.

  3. Are you being rushed?

    Act now, a countdown, “don’t hang up,” “don’t tell anyone.”

  4. Does it ask you to pay in a particular way?

    Gift cards, a wire transfer, cryptocurrency, a payment app, or cash.

  5. Does it ask for a code, password or personal details?

    A verification code, passcode, PIN, bank details or Social Security number.

  6. Does it want you to click, call or install something?

    A link, a phone number in the message, or an app so someone can “fix” your device.

Stop. Don’t click, call back, pay or share anything. Hang up or close it. Then contact the company yourself using a number you already trust — the back of your card, a statement, or a website you type in yourself. And talk it over with someone you trust.

Worth knowing

Honest organizations give you time to decide. Apple and Google never ask for your verification code, and Microsoft won’t call to offer support unless you asked it to.

Stay safe · page S04

What should I do if I already paid or shared a code?

Act quickly, and don’t be embarrassed — scammers are professionals and fool careful people every day. Do whatever applies to you, starting now.

If you…Do this now
Paid by credit or debit cardCall your card company or bank on the number on the back of the card. Ask them to reverse the charge.
Sent a bank transfer (or Zelle)Call your bank immediately and ask them to reverse the payment.
Paid with a payment appReport it to the app company straight away and ask for a reversal.
Bought gift cardsCall the gift card company on the number on the back of the card. Keep the card and the receipt.
Sent a wire transferCall the company and say a scammer tricked you: MoneyGram 1-800-926-9400 · Western Union 1-800-448-1492.
Paid with cryptocurrencyContact the exchange or crypto ATM company straight away.
Let someone onto your computerUninstall anything they had you install. Install updates and run a full scan (W24 Check for viruses with Windows Security). Change your passwords and turn on two-factor.
Gave a password or codeChange that password now, from a device you trust, and turn on two-factor (P25 Check your Apple Account is well protected for iPhone).
Gave your Social Security number (US)Go to IdentityTheft.gov for a step-by-step recovery plan.

Beware the second scam

Anyone who contacts you offering to get your money back — for a fee — is another scammer.

Then report it (S06 Where to report a scam), and note what happened on R12 Suspicious message record (in the kit). Outside the US, call your bank first, then use the reporting service for your country on S06 Where to report a scam.

Stay safe · page S06

Where do I report a scam?

Reporting helps stop scammers and warn others — even if you didn’t lose money. If anyone is in danger right now, call your emergency number.

Where you liveReport to
United StatesScams and fraud: ReportFraud.ftc.gov. Just an unwanted call: DoNotCall.gov. Internet crime: ic3.gov (FBI). Aged 60+: National Elder Fraud Hotline 833-FRAUD-11 (833-372-8311), Mon–Fri 10am–6pm ET. Support and guidance: AARP Fraud Watch Network Helpline 877-908-3360, Mon–Fri 8am–8pm ET.
CanadaCanadian Anti-Fraud Centre: 1-888-495-8501 (Mon–Fri 10am–4:45pm ET) or reportcyberandfraud.canada.ca. Also tell your local police.
United KingdomReport Fraud (it replaced Action Fraud in December 2025): reportfraud.police.uk or 0300 123 2040 — England, Wales and Northern Ireland. In Scotland: Police Scotland on 101. Worried about a call about your money? Dial 159 to reach your bank.
AustraliaScamwatch: scamwatch.gov.au. Cybercrime: cyber.gov.au (Submit a report), or 1300 CYBER1 (1300 292 371). Identity help: IDCARE 1800 595 160 (Mon–Fri 7am–7pm AEST). In danger: 000.

Spam texts and phishing emails

Spam texts (US, Canada, UK)Forward the message to 7726 (it spells SPAM), then delete it.
Phishing emailsUS: forward to [email protected]. UK: [email protected]. Fake Apple emails: [email protected].
Fake Microsoft supportmicrosoft.com/reportascam

Numbers checked October 8, 2026

If one has changed, look it up on the organization’s own website — never from a message or a search ad. Scammers sometimes pretend to be these hotlines, too: real ones won’t threaten you or ask for money.

Phone numbers and websites checked against each organization’s own page on October 8, 2026.

Keep the steps on paper

These steps come from Plain Steps: 67 one-page fixes like these for everyday iPhone and Windows 11 jobs, to read on screen or print. Every card has the same shape: the path, numbered steps, how to tell it worked, and when to stop.

One payment, no subscription · 30-day refund, no reason needed · Buying opens Gumroad’s secure checkout. See everything in the kit.