The Question We Hear Most: How Do I Know a Message Is a Scam?
Students ask us the same thing again and again. This article answers it with plain checks you can run on any call, text or email before you reply, click or pay anything.
Margaret O'Connell · · 6 minutes to read
Why this one question comes up so often
In almost every session of Financial Scam Awareness, someone puts a hand up and asks some version of the same thing: how can I tell if a message is real? It is a fair question, and it rarely comes from people who are careless. It comes from careful adults who have received something that looked right, sounded urgent and left them unsure.
The honest answer is that there is no single trick. Scam messages change their wording, their logos and their phone numbers all the time. What stays much the same is the shape of the request. Once you learn to see that shape, you stop needing to memorize examples, because you are checking the situation rather than the sentence.
This article gives the checks I teach in class, in the order I teach them. None of them require technical knowledge, only a few quiet minutes and the willingness to hang up or close the message first.
Start with the pressure, not the details
Before you read the message for spelling mistakes or odd addresses, notice how it makes you feel. Scams are built to produce a rush: a locked account, a missed delivery, a payment about to fail, a relative in trouble. The sender wants you to act before you think, and the feeling of being hurried is often the clearest warning you will get.
A real bank, courier or service provider can wait for you to call them back. They do not need an answer in ten minutes, and they will not be offended if you take an hour. If the message sets a short deadline or hints at a penalty for delay, treat that as a reason to slow down rather than speed up.
I ask students to say out loud, even to an empty room, what the message wants them to do and by when. Hearing it spoken often makes the pressure sound less reasonable than it felt on the screen.
- A tight deadline or threat of closure
- A request to act before you can ask anyone
- Language that frightens or flatters you
Check who is really contacting you
Caller names and sender names can be copied. A phone that shows a familiar bank name is not proof of anything, and a text that lands in the same thread as earlier genuine messages can still be fake. So do not use the contact details inside the message to verify it.
Instead, end the call or leave the message alone, then reach the organization yourself. Use the number printed on the back of your card, on a paper statement, or on the official website you typed in by hand. Ask whether they contacted you. If they did, they will have a record of it, and if they did not, you have your answer within a minute.
This single habit, calling back on a number you found yourself, defeats most phone, text and email scams. It costs nothing, it works every time, and it is the first thing I ask students to practise until it feels automatic.
- Hang up and call the number on your card
- Type the website address yourself
- Never use a link or number from the message
What a genuine request will not ask for
Some requests are wrong no matter who appears to be asking. A real bank will not ask you to read out your full PIN, your online banking password or a one-time code sent to your phone. Those codes exist to prove it is you, and nobody who works for your bank needs them from you.
In the same way, no legitimate organization will ask you to move money to a safe account, buy gift cards to settle a balance, or send funds by e-transfer to clear a fine. Payment methods that are hard to reverse are the ones scammers favour, and that preference tells you a great deal.
If any message asks for one of these things, you can stop reading. You do not need to work out whether the logo is convincing or the grammar is good. The request itself has already answered your question, and the only step left is to stop and report it.
- Passwords, PINs and one-time codes
- Gift cards or unusual e-transfers
- Remote access to your computer or phone
A short exercise to practise at home
Knowing the checks is different from using them while your heart is racing, so we rehearse. In class I read a made-up message aloud and ask the group to run through three steps: name the pressure, name the request, and say how they would verify it independently. It feels slightly silly at first, and then it becomes remarkably quick.
You can do this at your kitchen table. Take the next suspicious message you receive, or recall an old one, and write three short lines in a notebook: what did it want, how did it try to hurry me, and how could I have checked it safely. Keep the notebook near the phone.
Repeating the steps on low-stakes messages builds a habit that is still there when a convincing one arrives. Several students have told me the habit felt like a small door they could close, and that closing it calmly was most of the battle.
If you already replied or clicked
Many people write to us after the fact, embarrassed, and I want to say clearly that it happens to sensible people every week. What matters now is speed and calm, not blame. Contact your financial institution through a number you trust and tell them exactly what you shared or did.
If you gave out a password, change it at once from a device you trust, and turn on two-step verification if it is not already active. If money has moved, ask your institution what options exist and keep a written note of times, amounts and the message itself.
You can also report the attempt to the appropriate Canadian authorities so that others are warned. Then go back over the checks above without scolding yourself. Each scam you recognize, even late, makes the next one easier to stop.
- Call your institution on a trusted number
- Change passwords and enable two-step verification
- Keep screenshots and a note of what happened
The question of how to know a message is a scam has a practical answer: notice the pressure, verify through a number you found yourself, and refuse any request for codes, passwords or hard-to-reverse payments. You do not need to be an expert, only willing to pause. If you want to rehearse these steps with guidance and examples, the Financial Scam Awareness course walks through them at an unhurried pace.
Write to us through the contact page and describe what you would like to learn. We can point you to the Financial Scam Awareness course or another course that fits.
Tell us what you want to feel more confident about
ContactSend us a message
Email: hello@corpflowki.com