How Payment Scams Work, and the Simple Rules That Stop Them

Your phone rings. The caller ID shows your bank’s name. A calm, professional voice says there’s suspicious activity on your account and someone is trying to take your money. To protect it, you need to move it to a new “safe account” right now. They even know your name and the last four digits of your card.

Calls like this cost people huge sums every year, in every country, and they catch careful, well-informed people too. The good news is that nearly all payment scams depend on the same few tricks. Once you know how they work, they become much easier to spot.

Why the system itself is rarely the problem

Modern payments are protected in several layers. Your banking app is tied to your phone, your PIN or fingerprint is checked by your bank, and many payments need a one-time code. Breaking through all of that directly is very hard.

So fraudsters do something easier: they persuade you to make the payment yourself. Banks and regulators call this authorised push payment fraud. In plain words, it isn’t hacking. It’s deception.

Most payment fraud is not hacking. It’s someone persuading you to send the money yourself.

That matters because instant bank transfers are fast and final. Once you have approved a payment and it has reached the scammer’s account, it is often moved on within minutes.

The rules that defeat most scams

• Your bank will never ask you to move money to a “safe account”. Not to protect it, not to help an investigation, not for any reason. Anyone who asks is a scammer.
• You never need to pay, scan a code or enter a PIN to receive money. Not for a refund, a prize, a sale or a payment being returned. Money comes in without you doing anything.
• Nobody genuine will ask for your PIN, password or one-time code. Not your bank, not the police, not a delivery company and not tech support.

The most common tricks

1. The fake bank or police call

The caller claims to be from your bank’s fraud team, the police or a government agency. Caller IDs and text messages can be faked, so the call can look genuine. They create panic and then ask you to move money, read out a code or install an app.

What to do: hang up. Call your bank yourself using the number on the back of your card or in its official app. If possible, use a different phone, or wait a few minutes, as some scammers keep the line open.

2. The fake refund or payment request

Some payment systems, such as India’s UPI, let people send you a request for money, which you approve with your PIN. Fraudsters send requests labelled “Refund” or “Cashback”. Others send a QR code and say scanning it will pay you. In both cases, approving it sends money out.

What to do: if it asks for your approval or PIN, you are paying, not being paid. Decline anything you don’t recognise.

3. The “I paid you by mistake” message

Someone says they sent you money by accident, often with a convincing screenshot, and asks you to send it back. Sometimes no money was sent at all. Sometimes the money was stolen from someone else, and returning it makes you part of the chain.

What to do: check your real balance in your banking app, not a screenshot. If a genuine wrong payment arrived, tell your bank and let it handle the return. Don’t send money back yourself.

4. Fake customer support

You search online for a company’s helpline and call the first number you find, or a pop-up on your computer says it’s infected and gives a number to call. The “agent” asks you to install a remote-access app so they can “fix” the problem. Then they can watch, or control, everything you do, including your banking.

What to do: get support numbers only from the company’s official app or website. Never install software because a caller asks you to, and never let anyone take control of your device while your banking app is open.

5. The online marketplace trap

You’re selling something online. A buyer agrees instantly, without seeing it, and sends a link, QR code or “payment confirmation” that asks for your card or bank details to “receive” the money. Or they “accidentally” overpay and ask you to refund the difference.

What to do: remember the rule. A buyer pays you; you never pay, scan or log in to receive money. Wait until the money is actually in your account before handing anything over.

6. Fake delivery, tax and account messages

Texts and emails say a parcel is on hold, a fine is unpaid, a tax refund is waiting or your account will be closed. The link leads to a page that looks real and collects your card or banking details.

What to do: don’t click links in unexpected messages. Go to the organisation’s website or app yourself.

7. Romance and investment scams

These are slower. Someone builds a friendship or relationship over weeks, often online, before mentioning an emergency or a “guaranteed” investment, frequently in cryptocurrency. These scams are among the most costly, because victims often send many payments over time.

What to do: be very wary of anyone you have never met in person who asks for money or investment, however long you have known them online.

Habits that keep you safe

• Check the name before you pay. Many banking apps now show the account holder’s name, or warn you if it doesn’t match. If the warning appears, stop.
• Slow down. Almost every scam creates urgency: “act now”, “your account will be blocked”. A few minutes’ pause, and a call to someone you trust, is your best defence.
• Turn on extra security, such as app locks, payment limits and alerts for every transaction.
• Tell older relatives about these tricks. Scammers often target people who are less used to banking apps.

If you’ve been cheated

Speed matters, because money can sometimes be frozen before it’s moved on.

1. Contact your bank immediately using the number on your card or its official app. Ask it to stop or recall the payment and to block further payments if needed.
2. Report it to your country’s fraud or cybercrime service. Examples include ReportFraud.ftc.gov in the US, Scamwatch and ReportCyber in Australia, and the 1930 helpline or cybercrime.gov.in in India. In the UK, you can call 159 to be put through safely to your bank.
3. Keep evidence: screenshots, phone numbers, account details you paid to, and the time of each payment.
4. Watch out for “recovery” scams. People who have been cheated are often contacted by others offering to get their money back for a fee. That is another scam.