Online fraud: recognise it, stop it, report it

    Online fraud is a persuasion business rather than a hacking one. Nearly every successful scam relies on the same structure: a plausible reason to trust, a reason to hurry, and a payment method that is difficult to reverse.

    By Rui Matos · Cybersecurity Editor · Updated 18 September 2026

    Investment and cryptocurrency fraud

    The highest individual losses come from fake investment platforms. Victims are recruited through social media adverts, messaging groups or a contact who has cultivated the relationship for weeks, then shown a dashboard displaying steady gains that exist only as numbers on a screen.

    The mechanism that confirms the fraud is the withdrawal: a request triggers a 'tax', 'fee' or 'compliance deposit' that must be paid first. Legitimate platforms deduct fees from the balance. Any regulated firm can also be checked on your national financial regulator's public register before a single payment.

    • Guaranteed or unusually consistent returns
    • Pressure to act before an opportunity closes
    • Fees demanded before a withdrawal can be processed
    • Contact initiated through social media or messaging apps
    • Firm absent from the national regulator's register

    Romance and long-game fraud

    Romance fraud runs for months and rarely starts with a money request. The relationship is built first, often with an explanation for never meeting, and the first financial approach is small and linked to a crisis such as a medical bill or a blocked account.

    Requests escalate, and many cases end by merging into investment fraud: the partner introduces a trading platform they claim to use. The reliable check is behavioural — inability to video-call spontaneously, plus any request for money, is sufficient reason to stop regardless of how long you have talked.

    Marketplace and second-hand fraud

    Classified-ad platforms host two mirrored scams. Buyers pay for goods that never arrive, and sellers are sent a fake payment link to 'release' funds, which instead collects their card details or authorises a charge.

    No genuine payment system requires the seller to enter card details or a PIN in order to receive money. Keep communication and payment inside the platform, refuse to move to a messaging app, and be suspicious of any buyer offering to overpay or arrange their own courier.

    • Receiving money never requires entering card details or a PIN
    • Pressure to move off-platform to a messaging app
    • Overpayment offers and unusual courier arrangements
    • Bank transfer requested instead of protected payment

    Impersonation: banks, police and tech support

    Impersonation scams use authority and fear. A caller claims to be from your bank's fraud team, a police unit or a technology company, reports that your account or computer is compromised, and offers to help you secure it.

    The requests that follow are always the same three: install remote-access software, read out a code, or move money to a 'safe account'. No bank, police force or technology company ever asks for any of them. Hang up, wait a minute, and call back on a number from your card or the official website.

    What to do in the first hours

    Contact your bank immediately and ask for the payment to be recalled and the card or account blocked. Card payments and instant transfers have very different reversal prospects, but speed improves both, and many banks have a dedicated fraud line answered around the clock.

    Then secure the accounts involved: change passwords, remove any remote-access software installed during the call, enable two-factor authentication, and check for new payees, forwarding rules or devices added to your accounts.

    • Call the bank's fraud line and request a recall and block
    • Uninstall any remote-access tool and scan the device
    • Change passwords and enable two-factor authentication
    • Check for new payees, devices and mail-forwarding rules
    • Keep screenshots, references and transaction records

    Reporting and realistic recovery

    Report to your national fraud or cybercrime reporting service and to the platform where the contact began. Reports rarely recover money individually, but they are what makes patterns visible and platforms accountable.

    Be aware of recovery fraud: victims are frequently approached later by people claiming to retrieve lost funds for an upfront fee. No legitimate recovery service works that way, and the contact details usually come from lists sold between fraud groups.

    Frequently asked questions

    Can I get money back after a bank transfer scam?

    Sometimes. Outcomes depend on your country's reimbursement rules, how fast you reported it and whether funds remain in the receiving account. Report within hours, not days.

    Are card payments safer than transfers?

    Generally yes. Card schemes offer chargeback and fraud protections that instant bank transfers usually do not, which is precisely why fraudsters push for transfers.

    How do I check whether an investment firm is real?

    Search your national financial regulator's public register for the firm and confirm the contact details match. Clone firms copy the details of authorised businesses.

    Is it worth reporting a small loss?

    Yes. Small reports establish patterns that support takedowns and platform action, and they may support reimbursement claims later.

    Why am I being contacted again after being scammed?

    Victim details are resold, and recovery fraud specifically targets people who have already lost money. Treat any unsolicited offer to recover funds as a second scam.