Scams

Common Online Scams in 2026 and How to Avoid Them

By Marcus Hale · May 22, 2026 · 8 min read

Scams change costume but rarely change their script: create urgency or strong emotion, then ask for money, personal details, or account access. If you learn that pattern, you can recognise almost any scam — even brand-new ones. Here are the schemes most common in 2026 and the simple rules that stop them.

1. Fake delivery and "missed parcel" texts

A text claims a package could not be delivered and asks you to pay a small fee or "confirm details" via a link. The fee is bait; the real goal is your card number or login. Couriers do not collect redelivery fees by random text. Check any delivery directly on the carrier's official site or app, never through the link.

2. Bank and "fraud department" impersonation

You get a call or message: someone from your bank's "security team" says your account is under attack and you must move your money to a "safe account" or read out a code. This is one of the most damaging scams around. Your real bank will never ask you to transfer money to keep it safe, nor ask for a one-time code. Hang up and call the number on the back of your card.

3. Investment and crypto "opportunities"

Guaranteed returns, a tip from a stranger in a group chat, a slick site with a live "profit" ticker. These cons let you "withdraw" a small amount early to build trust, then encourage a large deposit that vanishes. Real investments do not guarantee profits, and pressure to act fast is a warning, not an opportunity.

4. Romance and friendship scams

Someone builds a warm relationship over weeks or months, then a crisis appears — a medical bill, a customs fee, a stranded trip — and they need your help. The emotional bond is the weapon. A genuine connection who refuses every video call and only ever needs money deserves real scepticism, however painful that is to consider.

5. Tech-support scams

A pop-up or call warns that your computer is "infected" and urges you to call a number or install software so they can "fix" it. Once they have remote access, they can steal data or demand payment. Real companies do not cold-call you about viruses. Close the pop-up, and never grant remote access to someone who contacted you first.

6. Marketplace and rental cons

A bargain item or apartment, but you must pay a deposit before viewing, or move the conversation off the platform. Once your money is sent, the listing — and the "seller" — disappears. Keep transactions on the platform, use payment methods with buyer protection, and be wary of any deal that needs an upfront wire transfer.

7. AI-polished phishing

Modern scam messages can be flawlessly written and even use cloned voices, so the old advice to "watch for bad spelling" is no longer enough. Polish is not proof. The reliable defence is to verify any unexpected request through a channel you already trust, regardless of how convincing it looks or sounds. Many of these begin as phishing, which we cover in how to spot a phishing email.

The three rules that cover almost everything

1. Slow down. Urgency is the scammer's favourite tool. A genuine matter survives a pause to verify.
2. Verify independently. Contact the company or person through a number or website you find yourself, not the one in the message.
3. Protect your accounts. Unique passwords and two-factor authentication mean that even a slip rarely becomes a takeover.

Strong, unique passwords are part of that armour — you can create them with our free password generator, and the broader playbook lives in our web security basics guide.

If you have already been caught

Act fast. Call your bank to stop or reverse any payment, change passwords on affected accounts, switch on two-factor authentication, and report it to your country's fraud authority. Speed matters — the sooner you move, the better your odds of limiting the damage.

Frequently asked questions

This article is general security education, not professional advice.