Cybersecurity Reach Foundation
All partner resources

Message library

Name the Scam Message Cards

Short, ready-to-share messages that name a scam pattern and give people a safer next step.

For
All partners
Status
Reviewed
Version
2026-09-03

How to use these messages

Start with what someone sees, name the scam pattern, and give one safe next step. Use one message at a time so the answer is easy to remember.

Impersonation and account scams

  • A familiar logo on a strange website? That is an impersonation scam.
  • A website that looks real but has the wrong address? That is a lookalike-site scam.
  • A support account asking for your secret code? That is a support impersonation scam.
  • A surprise sign-in request? That may be an account-takeover scam.
  • Someone who contacted you asking for a verification code? That is a code-stealing scam.
  • A login page opened from an unexpected document? That may be a credential-phishing scam.
  • A school account warning that demands an immediate login? That may be a phishing scam.

Jobs, payments, and money

  • A job that asks you to pay first? That is a job scam.
  • A task that requires you to top up an account? That is a task scam.
  • A recruiter asking for money before hiring you? That is an employment scam.
  • An invoice you never expected? That may be a fake-invoice scam.
  • A fee to receive a prize, refund, loan, or inheritance? That is an advance-fee scam.
  • A business invoice with a changed bank account? Verify it—it may be an invoice scam.
  • A group chat pressuring you to invest immediately? That may be an investment scam.

Delivery, government, and travel

  • A text about a missed delivery fee? That is a delivery phishing scam.
  • A surprise toll payment link? That is a toll-text scam.
  • A text about an unpaid speeding ticket? That may be a ticket-payment scam.
  • A government warning that demands payment through a link? That may be a government impersonation scam.
  • A vacation rental that asks for a deposit outside the official platform? That may be a rental scam.
  • A booking page with the right logo but the wrong address? That is a lookalike-site scam.
  • A host pressuring you to pay immediately? That may be a vacation-rental scam.

Downloads, games, and remote support

  • A meeting link that requires an unfamiliar update? That may be a malware scam.
  • A printer error that tells you to install remote access? That is a tech-support scam.
  • A page telling you to paste a command into Terminal? That is a malware warning sign.
  • A game update delivered as a mystery ZIP file? That may be a malware scam.
  • Free game currency that requires your password? That is a gaming phishing scam.
  • A gaming message promising a reward for signing in? That is a phishing scam.
  • A playtest that asks you to run an unknown file? That may be a malware scam.

Romance, prizes, and investment

  • An online relationship asking for money? That is a romance scam.
  • A new contact promising guaranteed investment returns? That is an investment scam.
  • A prize that requires a processing fee? That is a prize scam.
  • A stranger promising a large payout after you pay a fee? That is an advance-fee scam.
  • Someone threatening to share private images unless you pay? That is an extortion scam.
  • A crypto opportunity that promises no risk? That is an investment-scam warning sign.

Name it, then act

  • That is a phishing scam. Do not click; open the official service yourself.
  • That is an impersonation scam. Verify the person or company another way.
  • That is a payment scam. Contact your bank using its official number.
  • That is a job scam. Never pay to get paid.
  • That is a malware warning. Do not download or open the file.
  • That is a remote-access scam. Do not give anyone control of your device.
  • That is an account-takeover warning. Change your password and protect your account.
  • That is a scam pattern. Pause, save the evidence, and ask for help.

Audience examples

  • Students: A school message asking for an urgent password reset? That may be an account phishing scam.
  • Families: A child being rushed to download a file? That is a stop-and-check moment.
  • Gamers: A free item that requires a verification code? That may be an account-takeover scam.
  • Travelers: A reservation link that does not appear in the official app? That may be a booking scam.
  • Job seekers: A job that pays in gift cards, crypto, or fees? That is a job scam.
  • Older adults: A legal or government notice demanding immediate payment? That may be an impersonation scam.

Before you distribute this

  • Use it: Partner portals, presentations, newsletters, social posts, posters, and campaign planning.
  • Open every web address yourself before printing it.
  • Current warnings live at watchout.report. Check the date on anything time-sensitive.
Use your browser's print dialog to save this as a PDF.

Cybersecurity Reach Foundation · cybersecurityreach.org · Current warnings: watchout.report

General safety information. CSRF is not a crisis, legal, banking, safeguarding, or law-enforcement service.