Scam Explainers

10 Things Scammers Say (Word for Word)

Scam scripts are recycled across thousands of criminals. Learn these ten exact phrases and you'll recognize the play in the first sentence.

By SpamCheck Editorial Team·Updated 2026-09-03·5 min read

Quick answer

Memorize these ten: 'Verify your identity', 'Your account will be suspended', 'This is your final notice', 'Pay by gift card', 'Move your money to a safe account', 'Don't tell anyone', 'You've been pre-approved', 'I need a favor — are you at your desk?', 'We detected suspicious activity — call this number', and 'Congratulations, you've won'. Each maps to a specific scam, and each has the same counter: end the conversation and verify through a channel you already trust. When an email uses one and you're not sure, forward it to check@spamcheck.com before doing anything.

1. 'We need you to verify your identity'

Translation: type your password or card number into our fake page. Real companies verify you inside your account when you sign in on your own — they don't email you a link to 'verify'. The moment you see this phrase, the only safe move is to open the company's app yourself.

2. 'Your account will be suspended / closed'

Pure urgency. Real suspensions come with calm procedures and appeals; scams come with countdowns. Amazon, PayPal, Netflix, and your bank do not operate on 24-hour email ultimatums. Check inside your actual account — if it's silent there, the email was fake.

3. 'This is your final notice'

A favorite of fake invoice and fake subscription scams. 'Final notice' from a company you have no relationship with isn't a notice at all — it's an opener. Ask yourself: final notice of what, exactly? If you can't name the original transaction, there wasn't one.

4. 'Pay by gift card' — in any form

No government agency, utility, tech company, court, or business accepts gift cards as payment. Full stop. The request exists because gift cards are untraceable and irreversible. This single phrase, recognized, ends more scams than any other: IRS impersonation, utility shutoff threats, bail requests, prize fees — all of them.

5. 'Move your money to a safe account'

The centerpiece of the bank-impersonation scam that costs victims their life savings. There is no such thing as a safe account, a federal locker, or a protected wallet. Your money is safest exactly where it is. Anyone who says otherwise is in the process of stealing it — even if they know your name, your bank, and your balance.

6. 'Don't tell anyone about this'

Secrecy is the scammer's insurance policy, because the scam collapses under a second pair of eyes. Variants: 'keep this confidential', 'don't tell the bank what it's for', 'don't tell Mom and Dad'. The correct response to any request for secrecy is to immediately do the opposite.

7. 'You've been pre-approved / specially selected'

Flattery as a hook — for loan scams, investment scams, and prize scams. Ask the obvious question: pre-approved by whom, based on what? Legitimate offers survive that question; scams need you too flattered or rushed to ask it.

8. 'I need a favor — are you at your desk?'

The opening line of business email compromise, sent with your boss's or a colleague's name. The 'favor' is always gift cards or a wire. The tell: the request comes by email instead of a call, and the tone is slightly off. Verify with the real person on a channel you already have — it takes one minute and the scam never survives it.

9. 'We detected suspicious activity — call this number immediately'

The number connects you to the scammer's call center, not to Microsoft, Amazon, or your bank. Real fraud alerts tell you to contact them through official channels; they never need you to use the phone number printed in the alert. Call the number on the back of your card instead — always.

10. 'Congratulations — you've won'

You can't win a contest you didn't enter. Every 'prize' that requires a fee, taxes, shipping, or banking details to collect is a delivery mechanism for theft. Real sweepstakes exist, but they never charge the winner — the absence of an entry plus the presence of a fee settles it.

The pattern underneath all ten

Every phrase above tries to make you act fast, act secretly, or act through the scammer's channel. The universal counter is slow, public, and your own channel: pause, tell someone, verify independently. And when an email has you genuinely unsure, forward it to check@spamcheck.com — a plain-English answer in under a minute, first check free.

Frequently asked questions

Can a scam email avoid all ten phrases?
Yes — good ones do. That's why the phrases are a detector, not a guarantee. The deeper rule covers the rest: any message asking you to act urgently, secretly, or through its own links and numbers deserves verification first.
Why do the same phrases work decade after decade?
Because they target reactions, not knowledge — fear, urgency, greed, and helpfulness are constants. The scripts are shared and sold among criminal networks, which is why recognizing the phrasing is genuinely useful: you're recognizing the playbook, not just one criminal.

Sources

SpamCheck provides informational risk assessments and cannot guarantee that any message is completely safe. When money or sensitive information is involved, independently contact the organization using a trusted phone number or website.

About SpamCheck

SpamCheck helps people understand suspicious emails by letting them forward the message to check@spamcheck.com and receive a plain-English analysis. This guide was published by SpamCheck and written and reviewed by the SpamCheck Editorial Team.

Related guides