Recognise the Red Flags in Messages
- Unsolicited Messages: Be wary of messages from unknown numbers or senders you don't recognise, especially if they contain links or ask for personal information.
- Generic Greetings: Scammers often use generic greetings like 'Dear Customer' instead of your name, as they send messages to many people at once.
- Urgent or Threatening Language: Messages demanding immediate action, threatening account suspension, or offering too-good-to-be-true deals are common scam tactics.
- Poor Grammar and Spelling: Professional organisations typically proofread their communications. Mistakes in grammar or spelling can indicate a scam.
- Suspicious Links: Never click on links in messages you suspect are scams. They might lead to fake websites designed to steal your data or install malware.
Important
Spotting Deceptive Phone Calls
- Unknown Numbers: Be cautious of calls from numbers you don't recognise, particularly if they are from unusual international prefixes or appear to be local but feel 'off'.
- Caller ID Spoofing: Scammers can fake caller ID to impersonate legitimate organisations. Even if the caller ID looks familiar, remain vigilant.
- Demands for Personal Information: Legitimate organisations will rarely ask for sensitive details like your bank account number, PIN, or full password over the phone.
- Pressure to Act Immediately: Scammers often try to rush you into making decisions, claiming there's a limited time offer or an urgent problem that needs fixing.
- Requests for Remote Access: Never grant remote access to your device to an unsolicited caller, as they could install malicious software or steal your information.
Tip
Settings > Phone to reduce interruptions from numbers not in your contacts.Verifying Sender Information
- Check the Sender's Email Address: In an email, tap on the sender's name to reveal their full email address. Look for inconsistencies; legitimate companies use their official domain.
- Examine SMS Details: While SMS often shows a contact name, if it's from an unknown sender, there's no easy way to verify. Be inherently suspicious.
- Cross-Reference with Official Sources: If you receive a message or call claiming to be from your bank or a government agency, contact them directly using a number from their official website or a statement you know is legitimate. Do not use any contact details provided in the suspicious communication.
- Review Your Accounts Directly: Instead of clicking links in an email, log in to your accounts (e.g., banking, social media) directly through their official apps or by typing their website address into your browser.
Good to know
Utilising iPhone's Built-in Features for Identification
- Look for Verified Calls: Some legitimate businesses use verified calls, which display a checkmark and the company's name, logo, and reason for the call on your iPhone's incoming call screen. This is a good indicator of authenticity.
- Examine Contact Photos and Information: If a call comes from a contact you have saved, their photo and custom ringtone will appear. If it's an unknown number, this information will be absent.
- Check Recent Calls List: After an unknown call, you can tap the
iicon next to the number in yourRecentslist to see if there's any carrier information or options to block/report the caller. - Message Filtering: Go to
Settings>Messages>Message Filteringand ensure 'Filter Unknown Senders' is enabled. This organises messages from people not in your contacts into a separate list. - Safety Check: Periodically review
Settings>Privacy & Security>Safety Checkto see who has access to your information. While not directly for identifying scams, it helps manage your sharing settings and ensures unexpected contacts don't have access.
Tip
Recents call list and message folders to identify patterns of suspicious communications.Was this guide helpful?
Know someone who needs this? Send them the guide.
Written by
Jordan DicksonFounder, CyberSecurityGuides
Founder of CyberSecurityGuides, writing practical, jargon-free guides that help everyday people recover from and protect against online attacks.
Reviewed by CSG Security Engineers