How many did you spot?

Scams don’t all look the same. Some warning signs are obvious. Others are buried in the details, like a strange phone number, a misleading domain, an unexpected request, or a subtle attempt to create urgency, curiosity or excitement.

Here are 10 warning signs hidden across these messages.

1. An unexpected international phone number

The HSBC message includes a 0330 UK phone number that doesn’t match the recipient’s location or expected banking relationship.

Unexpected geography can be an important clue that something isn’t right.

2. Pressure to act immediately

“Call us immediately” creates urgency.

Scammers often try to reduce the time people have to stop, think and independently verify what they’re being told.

3. Unusual instructions around an OTP

Banks may send one-time passcodes, but an OTP notification generally shouldn’t require you to call a number provided in the same message.

The combination of a security code and an urgent instruction to call is a reason to verify through the bank’s official channels.

4. A domain that looks almost right

The Citi message directs the recipient to:

citidp.com

It looks connected to Citi at first glance, but it isn’t the domain a customer would normally expect.

Small differences in web addresses are easy to miss, especially when someone believes there may be a problem with their account.

5. A link designed to trigger action

“If this wasn’t you, secure your account” sounds helpful, but it immediately pushes the recipient toward a supplied link.

That is a classic phishing pattern: create concern, then provide the action the scammer wants you to take.

6. An unexpected sender from another country

The Bitcoin message comes from a +63 Philippines number with no existing relationship or context.

An unexpected financial message from an unknown international sender should immediately raise questions.

7. Money you weren’t expecting

“You received 3 Bitcoins.”

Unexpected prizes, refunds, investments and windfalls are common scam hooks. If you didn’t enter anything, buy anything or expect a payment, ask why someone would suddenly be giving you money.

8. The numbers don’t make sense

The message claims 3 Bitcoin are worth approximately $14,242. That valuation is dramatically inconsistent with the real value of three Bitcoin.

Scam messages often rely on people reacting to the promise of money without stopping to validate the details.

9. A suspicious claim website

The message asks the recipient to claim the Bitcoin through an unfamiliar website. Unexpected money + an unknown link + pressure to claim it is a strong combination of warning signs.

10. The offer itself is the hook

The “muse” message is more subtle.

A stranger compliments the recipient and offers $500 to use their photo for an art project.

There may be no malicious link. No obvious fake domain. No urgent threat.

That’s because this type of scam relies on social engineering.

The initial offer creates excitement and gets the recipient invested in the opportunity. Later, the scammer may introduce a payment issue, fake check, overpayment, fee or other reason the victim needs to send money.

The manipulation begins before the financial request ever appears.

The hardest scams don’t always have obvious red flags.

You had time to study these messages. Your customers often don’t.

They may be reading while working, traveling, caring for their family or worrying that something has happened to their account. In that moment, spotting every suspicious domain, behavioral cue and manipulation tactic is a lot to ask.

ScamRanger helps recognize the signals for them.

ScamRanger analyzes the message, the request and the behavioral techniques being used, helping customers understand what they’re seeing and what to do next, before uncertainty becomes financial loss.

Be there when customers need you most.

Contact info@scamranger.ai to see ScamRanger in action, or go to RangersAI to learn more.

‍