Glossary of scam terms
Plain-English definitions of the words you may see when learning about scams and online safety. New to the vocabulary? Start with phishing (the core trick), then smishing and social engineering. For one-line definitions see the scam dictionary; to recognise warning signs, browse the red flags.
A
Account Takeover When a scammer gains control of your account, often using a stolen password and a tricked OTP. Advance-Fee Scam A scam that asks for an upfront payment to unlock a prize, job, loan, or larger sum that never arrives. AI voice scam A scam that uses AI to clone a familiar voice - a relative, boss, or official - to fake an emergency or payment order. Authorised Push Payment Fraud When you are tricked into sending money yourself to a scammer's account.
B
Bank Impersonation Pretending to be your bank by text, call, or email to steal logins or move your money. Blackmail / Extortion Scam Threats to harm, expose, or embarrass you unless you pay. Business Email Compromise A targeted scam where criminals impersonate a colleague or supplier to redirect a payment.
C
Chargeback scam A scam where a buyer pays, receives the goods, then reverses the payment (chargeback) to get both. Charity Scam Fake appeals that exploit generosity, often after disasters. Credential Theft Stealing usernames and passwords, usually through fake login pages. Crypto Airdrop Scam Fake 'free token' offers that lead to wallet-draining sites. Crypto professor scam An investment scam where a 'professor', mentor, or VIP group gives 'guaranteed' trading signals on a fake platform. Crypto Wallet Scam A scam that tries to get your wallet seed phrase or a 'verification' transfer to drain your crypto.
D
Deepfake / AI Voice Scam Using AI to fake a voice, video, or image of someone you trust. Delivery Fee Scam A fake 'small fee' to release a parcel, capturing card details. Digital arrest A scam where fake police or officials keep a victim on a long video call, claiming they are under 'digital arrest' until they pay. Domain Spoofing Faking or imitating a trusted domain in links or email addresses.
E
F
Fake airdrop A bogus crypto 'free token' giveaway used to lure you into connecting a wallet or paying a fee. Fake invoice A scam invoice or 'you were charged' notice designed to make you pay, call a fake number, or enter card details. Fake login page A page that imitates a real login screen to capture your username, password, and two-factor codes. Fake Payment Confirmation A trick where a 'screenshot' or message claims a payment was sent to make you release goods. Fake Recruiter A scammer posing as a recruiter to gather personal details or fees. Fake support scam A scam where someone impersonates official support for a bank, platform, or tech brand to gain access or payment. Fraud report The act of reporting a scam or fraud to your bank, payment provider, and the relevant authority.
G
I
J
K
L
M
Malicious attachment An email or message attachment that hides malware or a phishing link, often disguised as an invoice or document. Malware Attachment A file attached to a message that installs harmful software when opened. Malware link A link that installs harmful software or opens a credential-stealing page when tapped. Money Mule Someone who moves money for criminals, often unknowingly, which is illegal. Mule account A bank or crypto account used to move stolen money, often opened by a victim tricked into 'processing payments'.
O
P
Payment redirection A scam where a fraudster changes the bank details on a real invoice or request so your payment goes to them. Phishing A scam where a message pretends to be from a trusted organisation to trick you into giving details or clicking a harmful link. Pig Butchering A long-running scam that builds a relationship or friendship before steering you into a fake investment. Pretexting Inventing a believable story or role to gain your trust and information.
Q
R
Recovery Agent Scam A person claiming they can recover your lost money for an upfront fee. Recovery Scam A follow-up scam that targets previous victims by promising to recover lost money for an upfront fee. Remote Access Scam A scam where a fake 'support agent' gets you to install software so they can control your device. Rental / Deposit Scam Fake listings that take a deposit for a property that is not available. Romance Scam A scam that builds a fake romantic relationship to ask for money or help with 'emergencies'.
S
Safe Account Scam A trick where a fake bank tells you to move money to a 'safe account' they control. Scam-as-a-service Ready-made scam kits, phishing pages, and drainer tools sold to other criminals, lowering the skill needed to scam. Seed phrase The secret recovery words that control a crypto wallet - anyone who has them controls all its funds. Seed Phrase Scam Any attempt to get your crypto wallet recovery words. Sextortion A threat to share private or intimate images unless you pay. Short link scam A scam that hides a malicious destination behind a shortened or redirect link. Shortened URL A link that hides its true destination behind a short redirect. SIM swap A scam where your phone number is moved to a scammer's SIM so they can intercept your calls and security codes. Smishing Phishing carried out by SMS or text message, often about deliveries, banks, or fines. Social Engineering Manipulating people through trust, fear, or urgency rather than hacking technology. Spoofing Faking a sender name, phone number, or email address so a message looks like it comes from someone you trust. Subscription Renewal Scam Fake 'your subscription is renewing' messages that harvest card details. Suspicious Link A link with traits common in scams: shorteners, look-alike domains, odd words, or insecure connections.
T
Task Scam A 'job' that pays for simple tasks but then asks you to top up your own money to continue. Tech Support Scam Fake support warning of a virus or problem to gain access or payment. Ticket Resale Scam Fake or duplicate tickets sold through messages and social posts. Toll / Fine Scam Texts about unpaid tolls, parking, or congestion charges with a payment link. Two-Factor Authentication (2FA) An extra security step beyond your password, such as a code or app approval.