Look for these Red Flags

Criminals use emotional appeals, threats, or tech tricks to steal money or information. Here are some signs to watch for:

  • Fake charities after disasters: Emotional appeals to donate quickly through unverified links.
  • IRS/tax impersonation calls: Threatening calls demanding payment for back taxes.
  • QR code tampering: Stickers placed over real codes at restaurants or ATMs that redirect you to fake websites.

An Example That Hits Close to Home

After a major hurricane, Linda wanted to support relief efforts. She clicked on a link shared on social media that looked like a well-known charity’s page. She donated immediately, hoping to help families in need.

Later, she learned the site was a fake. Her donation never reached victims. Upset, she reported the fraud and was directed to the real organization. Now, before giving, Linda checks charity legitimacy using IRS and trusted nonprofit databases — and she shares that advice with friends so they don’t get caught in the same trap.

How to protect yourself

Variations on the scam

Look out for these tactics that target fake disaster charities, impersonation calls, or login to public Wi-Fi:

  • Fake charities after disasters: Emotional appeals to donate quickly through links or social media pages that aren’t connected to real nonprofits.
  • IRS or tax impersonation calls: Threats of arrest, fines, or legal action unless you pay immediately.  The IRS never does this over the phone.
  • Hijacked QR codes: Fraudsters place stickers or tampered codes over legitimate ones. Scanning them can redirect you to fake websites or trigger downloads that hijack your phone input.

     

Related advice articles

Scams evolve every day. Stay informed with these free resources.

More advice articles Default State Blue Right Pointing Arrow Hover State Orange Right Pointing Arrow

What to do if something happens

If you gave money or information to a scam like these, you’re not alone. Contact us to secure your accounts and report the incident to the FTC.

In a nutshell

  • Verify before you give: Confirm that charities are legitimate by checking trusted sources like the IRS database or Charity Navigator. Don’t donate through links shared on social media without double-checking.

  • Ignore threats: The IRS, Social Security Administration, and other government agencies will never call demanding immediate payment. Hang up if you receive one of these calls.

  • Check QR codes carefully: Look for signs of tampering, like stickers placed over the original code. If something feels off, don’t scan.

  • Protect your devices: Don’t give remote access to anyone who contacts you unexpectedly, and don’t trust pop-ups warning of “viruses.”

  • Be cautious with “winnings”: Legitimate sweepstakes don’t require fees or sensitive information to claim a prize.

Want to learn about other banking scams?

See our full list here:

Common scams and how to avoid them