Guide Security

How to Recognize
and Avoid Online Scams

Scammers target everyone — not just "naive" people. With AI now powering deepfake video calls, convincing voice clones, and personalised messages, staying informed is your strongest defence. This guide gives you the universal checklist, every major scam type, and exactly what to do if you're targeted.

6
Red Flags
7
Scam Types
15 min
Read time
Everyone
Audience

01 Why Everyone Gets Targeted

A common misconception is that only inattentive or inexperienced people fall for scams. In reality, scammers are professionals. They study psychology, build convincing digital presences, run A/B tests on their messages, and specifically engineer situations to bypass your rational thinking through urgency, fear, and emotional manipulation.

Being educated, cautious, or tech-savvy provides partial protection — but not immunity. The most effective defence is knowing the patterns before you encounter them so you can recognise them under pressure, when a scam is specifically designed to prevent you from thinking clearly.

The 10-second rule

If a message, call, or offer creates urgency, fear, or excitement — stop for at least 10–30 minutes before doing anything. Scams are specifically designed to make that pause feel impossible. That pause is your most powerful defence.

02 The Universal Scam Checklist

If a message, offer, or contact triggers several of these red flags simultaneously, treat it as a scam until independently proven otherwise.

01
Too Good to Be True Critical

Any offer promising extraordinary returns, prizes you didn't enter for, or free high-value items should be treated with maximum scepticism. Legitimate opportunities don't need to promise the impossible.

"Double your money in 24 hours" "You've won GH₵50,000!" "Free iPhone — just pay shipping" "Guaranteed 300% ROI"
02
High Pressure / Artificial Urgency Critical

Creating time pressure is a scammer's primary tool for bypassing your rational thinking. Legitimate organisations don't demand immediate decisions or threaten dire consequences within hours. The urgency itself is the manipulation.

"Act now or lose this forever" "Your account will be suspended in 2 hours" "Only 3 slots remaining" "Police will arrest you if you don't pay now"
03
Suspicious Communication High

Be wary of unsolicited contact from unknown numbers, WhatsApp messages from strangers, emails from free domains impersonating companies, or social media DMs offering opportunities. Legitimate businesses use official channels.

Random WhatsApp DM with "investment opportunity" Email from @gmail.com claiming to be your bank "Dear Customer" from a service that knows your name
04
Requests for Money or Personal Info Critical

Never share OTP codes, passwords, or bank details via message, call, or form. Genuine banks and government agencies never ask for these. Any "verification fee," "release tax," or "processing payment" before receiving a prize or job offer is a scam.

Gift card payment requests Cryptocurrency transfers "Send your OTP to verify" "Pay processing fee to release funds"
05
Impersonation Critical

Scammers impersonate banks, government agencies, tech support, utility companies, and even people you know personally. Check profile creation dates on social media, look for mutual friends, and always verify through official channels rather than replying directly.

Fake GRA / Tax Authority demands Cloned Facebook profiles of friends "Microsoft Support" cold calls Fake police threatening arrest
06
Unusual Payment Methods High

Scammers prefer payment methods that are difficult or impossible to reverse — cryptocurrency, gift cards, wire transfers, and peer-to-peer payment apps sent as "Friends & Family" (which waives buyer protection). Any request to pay via these methods for goods, services, or fees is a major warning sign.

Bitcoin / crypto "investment" Google Play / iTunes gift cards PayPal "Friends & Family" for purchases Overnight wire transfer requests

03 Common Scam Types in 2026

Recognising a scam by category — before the emotional pressure starts — makes it far easier to stay clear-headed when you encounter one.

Romance Scams

Scammer builds a fake emotional relationship over weeks or months — often on Facebook, Instagram, or dating apps — then fabricates an emergency requiring money.

Refuses video calls. Claims to be overseas. Sudden financial emergency after emotional bond builds.
Investment / Crypto Fraud

Fake trading platforms, Ponzi schemes, or "mentors" promising guaranteed high returns. Early investors may see small "returns" to build trust before the exit scam.

Guaranteed returns. Pressure to recruit others. Platform prevents withdrawal. No verifiable company registration.
Tech Support Scams

A pop-up warning, cold call, or email claims your device is infected and instructs you to call a number or install software that gives the scammer remote access.

Unsolicited contact. Urgent pop-up with phone number. Request to install remote access software (AnyDesk, TeamViewer).
Fake Package Delivery

A text or email claims a package couldn't be delivered and asks you to click a link to reschedule — which leads to a phishing page or charges a small "release fee."

Packages you didn't order. Links to non-official domains. Small fee requests via unusual payment.
Government Impersonation

Scammer poses as GRA, Social Security, police, or immigration and demands immediate payment to avoid arrest, deportation, or account freezing.

Threats of immediate arrest. Demand for gift cards or crypto. Government agencies never demand payment this way.
Job Offer Scams

Too-easy, high-paying remote job requires no interview. Victim is asked to pay upfront for training materials, equipment, or a "refundable deposit."

No real interview. Vague job description. Asks for payment before starting. Pays to be "secret shopper."
AI Voice / Video Scams

Using AI voice cloning or deepfake video, scammers impersonate family members, colleagues, or executives to request urgent wire transfers or sensitive information.

Unusual urgency. Request for money or credentials. Slight audio/video distortions. Verify via a separate known call back.

04 AI-Powered Scams: The New Threat

// AI Is Changing What Scams Look Like

The "bad grammar" tells that once helped identify scams are becoming unreliable. AI writing tools produce perfect, personalised text at scale. More dangerously, voice cloning can replicate a person's voice from a 30-second audio clip — and deepfake video can make a scammer appear as someone you trust on a video call.

How to detect AI-powered scams:

  • The call or video has slight distortions, unnatural blinking, or lip-sync lag — these are deepfake artefacts
  • The "family member" or "colleague" is asking for something they would never normally ask via this channel
  • They avoid specific personal questions only the real person would know
  • The request creates extreme urgency and asks you not to tell anyone else
  • Establish a family code word now — a word only your family knows, used to verify identity in emergencies

The family code word

Agree on a secret word with close family members right now — before you need it. If you receive a distressing call from someone claiming to be a family member in trouble, ask them the code word. A scammer using a cloned voice won't know it.

05 Practical Avoidance Rules

These habits, applied consistently, make you a very difficult target.

Pause and Verify

Never act immediately on any unsolicited message or offer. Wait at least 10–30 minutes. Tell the person you'll call them back. A genuine organisation will wait; a scammer won't.

Verify Independently

Don't call the number in the suspicious message. Don't click the link in the email. Go directly to the official website by typing it yourself, or call the number on the back of your card or on the official website.

Check Links Before Clicking

Hover over links (or long-press on mobile) to preview the real URL. Look for misspellings, odd subdomains, or suspicious domains. Search the exact message text online — many scams are widely reported and appear immediately in search results.

Protect Your Personal Information

Never share OTP codes, passwords, or bank details via any channel — even if the caller sounds exactly like your bank. No legitimate institution ever asks for these. Enable 2FA on all accounts. Use a password manager.

Keep Devices Secure

Keep all software and apps updated. Install reputable security software. Use strong, unique passwords with a password manager. A compromised device can expose all your accounts simultaneously.

Talk to Someone You Trust First

Before responding to any high-stakes request — especially involving money — talk to a trusted friend, family member, or colleague. Scams rely on isolation; a second opinion from someone outside the situation often reveals the fraud immediately.

Use Only Official Apps and Payment Methods

For banking, taxes, and government services — always use the official app downloaded from the App Store or Google Play, or the official website. Never complete financial transactions through links sent in messages. Use reversible payment methods where possible.

06 Scam-Checking Tools

These free tools help you verify whether something you've encountered is a known scam or a compromised account.

HaveIBeenPwned

Check if your email or phone number appears in known data breaches. If your credentials are out there, scammers may already have them.

haveibeenpwned.com →
Google Reverse Image

Drag a profile photo into Google Images to check if it's stolen from someone else — a common technique in romance and job scams.

images.google.com →
WHOIS Lookup

Look up when a website domain was registered. Scam sites are often created days or weeks before you encounter them — a brand-new domain for a "bank" or "company" is a red flag.

who.is →
Google Search

Copy the exact text from a suspicious message and paste it into Google with quotes around it. Most common scam scripts are already reported by others.

google.com →
ScamAdviser

Enter a website URL to get a trust score and red flag report. Useful for checking unfamiliar e-commerce or investment sites before engaging.

scamadviser.com →
IC3 / FTC Lookup

Search reported scams in the FTC's consumer database. Useful for verifying whether a specific offer, company, or pattern has been reported before.

reportfraud.ftc.gov →

07 What to Do If You Think You've Been Scammed

Act quickly — especially in the first few hours. Many bank transfers can be reversed or frozen if reported fast enough.

1
Stop All Communication
Do not send any more money, information, or respond further. Block the contact immediately. Do not let the scammer try to "fix" the situation — this is a common technique to extract more money.
2
Contact Your Bank Immediately
Call the fraud line on the back of your card or the bank's official number. Report the transfer. Many banks can freeze outgoing transfers or flag incoming accounts if reported within hours. Time is critical here — act before the scammer moves the money.
3
Change All Affected Passwords
Change passwords for any accounts that may have been compromised — starting with email, banking, and any accounts that use the same password. Enable 2FA immediately on all critical accounts.
4
Report It
Report to your local police or cybercrime unit. Report the account/page to the platform (Facebook, WhatsApp, etc.). In Ghana, contact the Cyber Security Authority (CSA). Reporting helps protect others and creates a record for potential recovery.
5
Monitor Your Accounts
Watch all financial accounts closely for 30–90 days for unusual activity. If personal details were shared, consider placing a fraud alert with your bank. Check your credit report if applicable.
6
Don't Be Ashamed — Tell Someone
Scammers count on shame and embarrassment to prevent reporting. Reporting protects others. Scammers are professional manipulators — falling for a well-executed scam does not reflect on your intelligence. The only mistake is not reporting it.

Ghana-specific reporting

In Ghana, report cybercrime to the Cyber Security Authority (CSA) at csa.gov.gh or call the hotline 292. You can also report to the Ghana Police Service's cybercrime unit or your mobile money provider's fraud line if mobile money was involved.

08 The Golden Rule

If it feels off, it probably is

Your instinct that something is wrong is often correct — before your brain has consciously worked out why. That feeling of unease is your pattern-recognition system firing. Trust it, pause, and verify.

When in doubt, don't act alone. Call a trusted friend, family member, or GreyFixTech. A second perspective from someone outside the emotional pressure of the situation cuts through scam tactics immediately.

Share this guide

Awareness is the best defence — and it spreads. Share this guide with family members who may be less familiar with these tactics, especially older relatives and anyone who received an unexpected prize, job offer, or urgent call recently.