Protecting Yourself From Novel Scams

Phishing emails get most of the attention, but they’re just one delivery channel among many. The same scam shows up as a text message, a phone call, a fake job offer, a DM from a “friend,” or increasingly, a deepfaked voice or video call. The channel keeps changing. What almost never changes is the underlying playbook: a small set of psychological levers that reliably get people to act before they think.

Learning to recognize those levers — rather than memorizing what last year’s scam email looked like — is what protects you against the next scam, not just the last one.

The five levers scammers rely on

1. Urgency — “Your account will be suspended in 24 hours,” “final notice,” “wire this today or the deal falls through.” Urgency exists to short-circuit careful thinking. Legitimate organizations rarely require you to act in the next few minutes.

2. Authority — The message claims to be from your boss, your bank, the IRS, or your company’s IT department. People are conditioned to comply with authority quickly, especially under pressure — which is exactly why scammers impersonate it.

3. Familiarity / liking — A message that sounds like a friend, a coworker, or someone likeable is far less likely to be scrutinized. Scammers research their targets (or just guess common relationships) specifically to earn this reduced scrutiny.

4. Scarcity — “Only 2 spots left,” “one-time offer,” “expires tonight.” Scarcity manufactures a fear of missing out that pushes people to skip verification steps they’d normally take.

5. Consensus / social proof — “Everyone on the team already verified their info,” “thousands of others have already claimed this.” If it seems like everyone else already did the thing, it feels safer — and less necessary to check — even when no one actually did.

Why this framing matters more than “spot the fake email”

Any single scam might combine two or three of these levers at once — for example, a fake “IT department” text (authority) demanding you reset your password right now (urgency) before your account is locked. The specific story will be new. The five levers underneath it almost never are.

What to actually do

• Notice the pressure, not just the story. If a message is pushing you to act fast and without checking, treat that pressure itself as the warning sign — regardless of who it claims to be from or how it arrived.
• Verify through a separate, known channel. Don’t reply to the message or call a number it gives you. Look up the organization’s number yourself, or message the person through a channel you already know is theirs.
• Slow down on purpose. Legitimate requests can almost always wait a few minutes for you to verify. If something insists it can’t, that’s itself a signal.

Check out our Educational Materials section for a printable checklist you can keep handy for exactly this situation.