Scams don't look like scams anymore: here's what to watch for

Modern scams don't look like the clumsy phishing emails of a decade ago. Today's fraudsters mimic delivery alerts, bank messages, and texts from people you know, then push you to act before you verify. Watch for urgency, unusual requests, and polished messages that feel completely ordinary.

For years, spotting a scam was supposed to be simple. The email came from a suspicious address, the spelling was primary-school level, the promise was hilariously unlikely, and somewhere in the middle sat a link that looked like alphabet soup. Delete it and move on. That advice still helps, but it no longer tells the whole story.

As scammers become increasingly sophisticated, staying vigilant online has never been more important. The shift is exactly what our Nostalgia: Then & Now series tracks: the scams that once shouted at you now whisper, dressed in the language of everyday life.

Key Takeaways

• Modern scams mimic ordinary messages—parcel alerts, bank warnings, account notices—not outlandish windfalls.
• Urgency is the scammer's favourite tool; pressure to act fast is often the clearest red flag.
• Bad spelling and weird links still appear, but generative AI can make fraudulent messages look polished and professional.
• Verify requests independently: open your bank's app yourself, never use contact details supplied in a suspicious message.
• Even messages from familiar names deserve a second check when the request is unusual or secretive.

Why don't scams look like scams anymore?

Old-school phishing relied on obvious tells. You learned to spot typos, strange formatting, and URLs that made no sense. Many of us still picture that era when we hear the word "scam"—and that mental image is part of the problem.

Modern scams are increasingly designed to look like something you would expect to receive: a delivery notification, a message from your bank, an account alert, or a conversation with someone you know. The trick is not necessarily convincing you that a major life event is happening. It is convincing you that something completely ordinary is occurring, then getting you to react before you stop to question it.

A fake parcel notification does not need to promise you a billion dollars. It only needs to arrive on the same afternoon you are actually waiting for a delivery. A fraudulent banking message does not need an elaborate story when it can simply claim there has been a dodgy transaction and ask you to investigate.

Scammers create a familiar situation, introduce a small problem or opportunity, then give you a straightforward way to resolve it. They are not necessarily trying to beat you at a game of intelligence. They are trying to control the circumstances in which you make a decision.

What are the biggest warning signs of a modern scam?

One of the most useful warning signs is also one of the oldest: pressure. Messages telling you to act immediately, warning that an account will be shut down, claiming that a payment has bounced, or suggesting an opportunity will disappear are designed to short-circuit the part of your brain that would normally ask whether the message makes sense.

The warning sign is being pushed toward a decision before you have had time to verify what is happening. If a message claims to be from your bank, do not use the phone number or link supplied in it. Open the bank's official app or website yourself. If someone appears to be contacting you on behalf of a company, find that company's contact details independently. It might take another minute. That is precisely the point.

Rubbish spelling, strange formatting, and laughably suspicious URLs remain useful clues, but they are no longer a complete defence. Generative AI has made it easier to produce polished, convincing text, while scammers can combine legitimate branding, copied websites, and familiar language to make fraudulent communications look considerably more professional than the phishing attempts many of us grew up recognising.

A message can look exactly like something sent by a company you use regularly and still have nothing to do with that company. The more convincingly something imitates the familiar, the more important it becomes to verify the request itself rather than judging its appearance.

What actions should make you pause before you click?

Sometimes the most revealing part of a scam is not the message itself but the action it wants you to take. Be particularly cautious when an unexpected communication asks for passwords, financial information, or authentication codes.

The same goes for requests to install software, grant remote access, scan an unfamiliar QR code, move a conversation elsewhere, or make a payment using an unusual method. The warning sign is an unexpected request combined with pressure, secrecy, or a story that makes it difficult to verify.

If you normally log into your bank through its app, but someone suddenly asks you to follow a link in a text message instead, stop. If a supplier suddenly wants payment sent to a new account, do not simply reply to the email to check. Contact the supplier using details you already trust. The safest response to an unusual request is often not to solve it faster, but to step outside the conversation and verify it independently.

How do impersonation scams exploit people you trust?

Impersonation scams add another layer because familiarity itself can become part of the attack. A message appearing to come from a friend, relative, colleague, or manager carries an advantage that a random phishing email does not. You already have a reason to trust the person, so your brain does not have to start from zero.

That does not mean interrogating every text from your family as though you are conducting a cybercrime investigation. It means unusual requests should remain unusual, even when they come from someone you recognise. If a family member suddenly needs money, a colleague asks for sensitive information, or someone you know wants an unexpected action, verify it through another channel. A quick phone call can be considerably more reliable than analysing whether a message sounds like something that person would write.

Security tools can provide another set of eyes when you are unsure, but the best scam defence is still a pause. Notice when something is trying to rush you into doing something outside your normal routine. Stop before clicking. Check through a separate channel. Do not use contact details supplied by the suspicious message. If you are still unsure, ask someone you trust rather than letting the person on the other end make the decision for you.

During Scam Awareness Week, that is probably the most useful thing to remember: when something online suddenly makes you feel that you need to act right now, take a moment and ask yourself why. That pause could be the difference between closing a suspicious message and spending the next several weeks trying to undo what happened. For more detail on how these tactics have evolved, see the original Mashable report that helped shape this guide.