5 Tips To Outsmart Online Scammers

How to take yourself from scam-susceptible to scam-savvy.

Image of cell phone with giant lock on it

Getty Images

We’ve all received that urgent text about an “unpaid toll bill,” or a phone call saying our Medicare card needs updating. Scammers are everywhere these days, and they’re getting more sophisticated — but you can outsmart them. That’s why we turned to KTLA tech reporter Rich DeMuro for expert advice on the most popular scams circulating right now and how to avoid falling victim. Whether you’ve gotten a suspicious text, a fake website, or a job offer for a position you never applied for, recognizing the red flags can save you time, stress, and most importantly, money. 

Don’t engage

When your phone labels a number as a “potential scam,” it’s tempting to answer and tell the caller to buzz off. But according to DeMuro, that’s the worst thing you can do. “If you respond to a scam text or call — even to say ‘Take me off your list’ —you’re confirming to the scammer that a real person is on the other end,” he explains. “These scammers send out thousands of messages to see who responds. If you reply, it signals that you’re willing to interact, and your number could end up on a list shared with other scammers.” 

Before you trust, always verify

A common scam making the rounds right now involves a text message claiming you owe money for a highway toll, with a link to make a payment. “If you take toll roads frequently, it’s easy to fall for this one, especially since so much is automated these days,” says DeMuro. “But in general, a government agency won’t text you a direct payment link. If you’re unsure, visit the toll authority website, enter your license plate number, and check if you actually have an unpaid toll.” 

DeMuro stresses that legitimate businesses usually don’t send you messages asking you to take immediate action: They’ll inform you of the issue, so you can take action yourself. “This is a big issue on Facebook,” says DeMuro. “Scammers send fake notifications claiming that one of your posts is being removed for copyright infringement, and instructing you to log in to see it. Since Facebook requires two-factor authentication, the scammer may follow up with a message asking you to share the code you just received. By doing so, you’ve unknowingly handed over your username, password, and authentication code — giving them full access to your account and personal data.” 

Have a code word

Today, one of the scariest scams involves the use of AI voice cloning, and DeMuro says we can only expect these calls to get more sophisticated in the future. A scammer can pull info about you or a loved one from the internet, including any videos you’ve ever appeared in that feature your voice, and then clone your voice using AI. They can then spoof your phone number, meaning they use software to make it appear that a call is coming from your number. (Your number itself isn’t hacked, the hacker is just able to fake the number that appears onscreen.)

“What this means,” explains DeMuro, “is that you could receive a call from your daughter’s phone number, and the caller will have your daughter’s voice, and ‘she’ may even know some significant information like her address, passwords, or other information the scammer has been able to find through hacking.” The hacker will present a panic-inducing scenario, like that your daughter has been arrested and needs to be wired money instantly. “They’ll play off your emotions so you don’t have time to step back and think about whether this is actually real or not,” explains DeMuro.

This is why DeMuro suggests you create a code word that everyone in your family should know. “Don’t make it a password you’ve used before, because the hacker could have access to that,” he explains. “Make it something you all can reference and remember, but that isn’t something you could easily find on the internet.” This way, even if you’re panicking, you can ask a simple question to verify if the situation is real or not. 

When in doubt, record

Since scammers are typically breaking the law, the last thing they want is to be recorded. “A new feature available on iPhones running on iOS 18 or higher, as well as the latest Pixel and Samsung models, allows you to press a button to record a call. An automated voice announces, ‘This call is now being recorded.’ In most cases, scammers will hang up immediately.” If you’re unsure whether a caller is legitimate, this simple trick can quickly help you determine if you’re dealing with a scam.

Download an app to assist

The bad news about the world getting increasingly more digital is that scammers can find you at the click of a button. The good news is that apps designed to monitor your information are getting more sophisticated too, and they’re constantly coming up with new ways to outsmart scammers before they can inflict lasting damage.

While some of these apps require a subscription or one-time fee, our number-one pick to help you stay a step ahead of fraudsters is actually free to join. The Intuit Credit Karma app offers services to monitor all your personal information in one place, at no cost to you. We love its identity monitoring service, which can reveal if your personal information has been found anywhere on the dark web. If it finds that your data has been leaked in another company’s data breach, it’ll alert you so you can take immediate action. If you don’t want to check your credit score every day, Credit Karma can help with that, too. With its credit monitoring service, you’ll receive a notification alerting you if there’s been a significant change to your credit score. 

If you’re wary about sharing your personal info in an app, that’s good: You should always double check that a site or service is trustworthy and legitimate before sharing any financial information, especially if that includes your checking account info or social security number. We can vouch for Credit Karma, which has strict security measures in place to protect your information from fraudsters. These include data encryption, two-factor authentication, and timely alerts if any suspicious activity is detected on your account. 

With caution, awareness, and a little help from Intuit Credit Karma, you can keep your personal and financial data from getting into the wrong hands. But if you do fall for a scam, DeMuro advises against being too hard on yourself. “Scammers prey on emotions and create urgency to cloud your judgment,” he says. “Their entire job is to outsmart people. The best way to protect yourself is to slow down, stay informed about evolving scams, and remain vigilant.”