I recently fell victim to a very sophisticated email scam that has been doing the rounds among content creators. It was frightening how good they were, and I’m usually pretty savvy when it comes to this sort of thing.
It was all pretty simple: they sent me an email inviting me to speak as a guest on a well-known industry podcast. Not unusual, as I do these regularly. The recording was done on Facebook, and while we checked the tech stack involved, they hacked my pages.
Luckily, I noticed something was happening and stopped it before they could do too much damage. But it was scary how easily I fell for it and even scarier to realize how sophisticated the whole thing was. So here are my top tips for protecting yourself and your money online.
7 Ways to Avoid Financial Scams
Fraud has gotten frighteningly sophisticated, and scammers use AI to clone voices, fake phone numbers, and create convincing emergencies designed to catch you off guard.
Protecting yourself from these scammers is a priority in this era of AI, where it’s hard to tell what’s real and what’s not.
Don’t Let a Convincing Email Catch You Off Guard
I fell for this hook, line, and sinker, as did other experienced people I know, so forewarned is forearmed.
Today’s email scams are polished, plausible, and tailored specifically to you. Scammers research their targets. They know what you do, what communities you’re part of, and what kinds of messages you’d expect to receive. Then they craft something that fits right in.
You might get an invitation that appears to come from a well-known brand, a professional organization, or someone in your industry, as happened to me. The email address looks right, the branding looks right, and the request makes complete sense given what you do. There’s nothing to trigger alarm bells.
The trap is usually buried in what happens next. You click a link, join a call, download an attachment, or grant access to something that seems routine. By the time you realize something is wrong, they already have what they came for.
Before you respond to any unsolicited email, even one that looks completely legitimate, verify it independently. Don’t use the contact details in the email itself. Go directly to the organization’s official website and reach out through their published channels to confirm the communication is real.
Look closely at the sender’s email address. Scammers are clever with this. They’ll swap one letter, add a hyphen, or use a domain that’s almost identical to the real thing.
Be especially cautious about any email that asks you to click a link, log into an account, download a file, or grant access to anything. Legitimate organizations rarely need you to do any of those things urgently, and urgency is always a red flag.
If something feels slightly off, trust that instinct.
Take a Hard Look at What You’re Sharing on Social Media
Scammers love Facebook, and not just to hack accounts. They study them.
They’re looking for the name of your first pet, your high school, your hometown, and your family members. Why? Because those are the answers people use for bank security questions.
They’ll also look for photos and posts that tell them your grandchildren are studying abroad or your daughter is on vacation, so they can craft a convincing fake emergency.
Go through your privacy settings and switch your profile to Friends only. Remove your full birthdate if it’s visible. Skip those fun quizzes asking for your favorite car or childhood nickname, because that innocent looking quiz is collecting personal data online that these sophisticated scammers can find and use.
Never Trust a Call Just Because It Looks Legitimate
Scammers can fake a caller ID. They can make it look like your bank, Medicare, or even the IRS is calling. The number on your screen can match exactly.
If you get an unexpected call asking for personal information, money, or urgent action, hang up. Don’t press any buttons and absolutely don’t answer any questions. This happened to me a few years back, and this time I didn’t fall for it.
As soon as I got off the phone, I called my bank to ask if they’d called me for certain details, and, of course, they said no. So, whoever your phone call is from, once you have put the call down, call the company and ask if they’ve rung you. It also alerts them to the scam so they can ensure others don’t fall for it.
Set Up a Family Code Word for Emergencies
Did you know that AI can clone a voice with just a few seconds of audio? A scammer can listen to a video your grandchild posted online and then call you, sounding exactly like them, saying they’re in trouble and need money fast. It’s terrifying, despicable, but it works.
The best way to avoid this is by agreeing on a code word with your closest family members. Choose something random that has nothing to do with anyone’s name or your family history. “Green umbrella” or “Tuesday toast” works perfectly.
If someone calls claiming to be a family member in an emergency, ask for the code word. If they don’t know it, you know it’s not them.
I’m showing my age now, but I remember listening to a very old episode of Paul Temple on the radio with my parents, years ago. Paul Temple was a detective, and people were always trying to kill him, so he and his wife had a code word for if anyone called saying they were him. It was “Where’s Charlie fishing?” and it got them out of all sorts of potential danger.
Use Your Phone’s Built-In Spam Protection
Modern smartphones have built-in tools to stop unknown callers from ringing through at all. This helps no end because scammers are relying on you getting flustered on the call and doing as they say. You can avoid that happening altogether by silencing unknown callers.
On an iPhone, go to Settings, then Phone, and turn on Silence Unknown Callers. Anyone not in your contacts goes straight to voicemail.
On an Android, open the Phone app, tap the three-dot menu, go to Settings, and look for Block Numbers or Caller ID and Spam. Turn on the option to filter unknown callers.
You’ll miss the occasional genuine call from a new number, but you can always return calls from your voicemail.
Switch from Passwords to Passkeys
Let’s be honest. How many of us use the same password for absolutely everything? Is it any wonder they’re easy to guess or steal? If you are good and use different passwords for everything, it’s also a nightmare trying to remember which one you used for what.
Fear not, there’s a way around that, too. Major platforms, including Google, Apple, Amazon, and most banks, now offer something called passkeys. Instead of typing a password, your device uses your fingerprint or face scan to verify it’s really you. It’s the same technology you already use to unlock your phone.
Go into the settings of your key accounts and look for Sign-in Options or Security. If you see an option to Create a Passkey, turn it on. You won’t have to remember anything, and there’s nothing for a scammer to steal. I guess the next thing will be that they’ll be able to clone your face – let’s hope not.
Use a Separate Device Just for Banking
When you use the same device for everything, shopping, social media, reading the news, and banking, one bad click on an unsafe website can expose your financial accounts. Malicious software can run in the background, collecting your login details without you knowing.
The solution is to set aside one dedicated device for financial tasks only. My brother does this as he’s paranoid, and it’s not a bad idea. He has an old iPad he uses specifically for booking things and banking online, but you could use a spare laptop, or an old phone you no longer use, all work well.
Make sure you don’t install social apps on it or use it to browse the web generally. Stick to checking your accounts, paying bills, and managing investments to be on the safe side.
When you’re done, turn it off. This creates a clear boundary between your money and the riskier corners of the internet, and it dramatically reduces what a criminal can access even if something does go wrong.
Disclaimer: This article is for informational purposes only and does not constitute financial or legal advice. For personalized guidance on protecting your finances, please speak with a qualified financial or cybersecurity professional.
Disclaimer: The content in this article is for informational purposes only and is not intended as financial, investment, or tax advice. Always consult a qualified financial advisor or tax professional before making decisions about your money, investments, or retirement planning.
Disclaimer: This article is for general information only and is not professional advice. It may contain affiliate links. Please see our full Editorial Policy for details.
Kylie Lang is a nationally syndicated travel journalist with bylines on the Associated Press Wire & more, a lifestyle writer, and the founder and editor of Your Lifestyle Library (yourlifestylelibrary.com). She holds a BA (Honours) in History from the University of Kent and is a member of the British Guild of Travel Writers.