Scam Rules: How to Not Get Scammed

Header

Author: James Greening

January 29, 2021

It’s easy to get scammed online, but it’s equally easy to avoid getting scammed. Just observe these simple rules to ensure that you never get scammed (again).

http://

Scam Rule #1: If it’s too good to be true, it probably is

The most obvious sign of an online scam is if the prices or offers are too good to be true. Rarely, if ever, do such promises turn out to be real. Beware of ‘too good to be true’ prices and incredible returns on investments.

http://

Scam Rule #2: Won a prize without entering? It’s a scam!

The scam can be in the form of an unexpected lottery win or inheritance from a relative you have never heard of. To receive the amount, you will be asked to pay a 'small fee'. If you pay one fee, there will be another and the scam will continue till you realize that there is no prize money or inheritance.

http://

Scam Rule #3: Don't trust unconventional domain name extensions

Scammers often purchase domain names with extensions such as .online, .buzz. .info and more as they are available cheaply. If the website name carries a domain name extension other than common ones such a .com, .net, .org, or .gov, it would be wise to proceed with caution.

http://

Scam Rule #4: 80% discount on a well-known brand? It’s a scam

Reputed brands rarely slash the prices of their products. If you see huge discounts, say more than 20%, being offered on a big-name brand then there is a good chance that it might be a scam. You can visit the brand's official website to check for ongoing sales.

http://

Scam Rule #5: Glowing reviews on the website may be fake

Many websites have internal review systems that allow the owners to highlight positive reviews and edit or delete negative reviews. In some cases, they may be completely fake reviews written by the website owners themselves. Always check third-party review systems, such as Scamadviser.com, to understand what customers are really saying.

http://

Scam Rule #6: "Falsus in uno, falsus in omnibus”. "False in one thing, false in everything."

Transparency and truth are two of the most important requirements to consider a website genuine. Websites can make false or contradictory claims about the prices, product descriptions, website age, certifications/trustmarks, number of users, payment methods and more. If even one piece of information is found to be fake, it would be wise to view the whole website with suspicion.

http://

Scam Rule #7: Need to pay before you can work? It’s a scam

Legitimate companies will never ask candidates to pay a fee before they can start earning. Avoid any employer or recruiter who requires you to pay them a subscription fee, membership fee, account upgrade fee or anything similar. It is likely to be a scam.

http://

Scam Rule #8: No contact details? Avoid all contact!

Always note the contact details of any company you are dealing with for the first time. If the contact details such as phone number, email ID and address are missing or incomplete, it may be wise to look somewhere else.

http://

Scam Rule #9: Greed lowers IQ by 50%

Hearing promises of huge returns on investment or opportunities to earn enormous incomes can impair logical thinking. Always think critically whether the kind of money being promised is realistic, to avoid falling victim to an HYIP Scam or Job Scam.

http://

Scam Rule #10: The Devil is in the details. Always read the fine print

Things such as the Terms & Conditions, Shipping Policy or Returns Policy of a company may hide important details not mentioned anywhere else. Always try to get as much information as possible before making an online purchase.

http://

Scam Rule #11: Don’t invest through someone you met on social media

Legitimate investment companies do not operate solely online and especially not using social media or messaging apps. The internet provides anonymity to scammers who use fake profiles to lure investors. Never trust anyone who claims to be an expert in trading or investing if all they have is a social media profile.

http://

Scam Rule #12: 1-15% returns per year are realistic. Anything more might be a scam

Even the best investors in the world do not average more than 20% returns per YEAR. Promises of doubling your money in days, weeks or even months signal that it may not be a legitimate investment opportunity. Returns such as 1% to 3% per day are only possible in Pyramid or Ponzi schemes.

http://

Scam Rule #13: Avoid clicking links in emails

Clicking links in emails can make you the victim of a phishing attack. Malicious emails are designed to look like alerts from genuine companies but redirect you to a fake page. To avoid your login credentials or payment details being compromised, don't click links in emails. Visit the company's official website directly and log in from there.

http://

Scam Rule #14: All investments carry risk. Never invest in a hurry

'Risk-free investment' is a myth that exists only in the land of scams. Never make the mistake of neglecting to read the fine print. You may find red flags suggesting that the investment opportunity is not as safe as it seems. If there is no detailed documentation about the investment, it is most likely a scam.

Keep the above tips in mind to stay safe online. You can keep our Scam Checklist handy (and share it with friends) to know the signs of a scam to watch out for. For more information on how to spot scams, read our article on How to Recognize Scams.

Report a Scam!

Have you fallen for a hoax, bought a fake product? Report the site and warn others!

Help & Info

Top Safety Picks

Your Go-To Tools for Online Safety
Disclaimer: Some of the links here are affiliate links. If you click them and make a purchase, we may earn a commission at no extra cost to you.

  1. ScamAdviser App : That site looks legit. That's exactly how they get you. Modern scams are frighteningly convincing. ScamAdviser scans sites and blocks fraud calls automatically. Free on iOS & Android.
  2. NordVPN : NordVPN delivers powerful, seamless protection for your online life - whether you're at home, on public Wi-Fi, or traveling abroad. Recognized as one of the fastest VPN services available, it combines lightning-fast speeds with advanced encryption to keep
  3. Incogni : Incogni automatically removes your personal data from data brokers that trade in personal information online, helping reduce scam and identity theft risks without the hassle of manual opt-outs. Reclaim your privacy now!
  4. Private Internet Access (PIA) : PIA gives you a no-logs VPN built on the latest encryption standards and WireGuard protocol — meaning your browsing activity stays yours alone. Fast, private, and transparent. Take back your privacy today!
  5. Surfshark VPN : One subscription, unlimited devices. Surfshark is the fastest VPN out there — covering your phone, laptop, tablet and more with a stable, secure connection for browsing, streaming and working. Get Surfshark now!
  6. Proton VPN : Independently audited and built with a strict no-logs policy, Proton VPN is trusted by over 3 million users worldwide. It’s been named Best VPN by Wired, PCMag, and Vice—offering strong encryption for anyone who takes their privacy seriously. Give Proton
  7. Mysterium VPN : MysteriumVPN gives you real privacy without relying on a single company to protect it. Built on a decentralized network of independent nodes across the globe, it hides your traffic from ISPs, trackers, and the VPN provider itself. Choose data center IPs f

Popular Stories

In a nutshell: A good VPN protects your privacy with strong encryption, a strict no-logs policy, and fast protocols like WireGuard. The best VPNs also offer wide server coverage, leak protection, and easy-to-use apps for all devices. For 2025, the top providers are NordVPN, ExpressVPN, Surfshark, Proton VPN, Private Internet Access, CyberGhost, and Mullvad—each excelling in speed, security, or value. In an age where every click is tracked, a Virtual Private Network (VPN) is no longer just a luxury—it's an essential tool for digital privacy and security. A VPN works by creating a secure, encrypted tunnel between your device and the internet, masking your real IP address and protecting your sensitive data from prying eyes. But with hundreds of providers out there, how do you sort the secure from the suspect? This guide breaks down the non-negotiable features of a quality VPN and highlights the 7 top-rated services for 2025. What to Look for in a Good VPN: The 4 Non-Negotiable Pillars 1. Ironclad Security Features Strong Encryption: AES-256, the gold standard. Secure Protocols: OpenVPN, WireGuard, NordLynx, Lightway. Avoid PPTP. Kill Switch: Ensures no accidental IP leaks. Leak Protection: Covers DNS, IPv6, and WebRTC. 2. Verified Privacy Practices No-Logs Policy: No activity or metadata tracking. Independent Audits: Verification by third parties. Safe Jurisdiction: Prefer countries outside the 5/9/14 Eyes alliances. 3. High-Speed Performance Fast Protocols: WireGuard and equivalents. Large Server Network: Less crowding, more reliable speeds. 4. Essential Usability Features Multi-Device Apps: Windows, Mac, iOS, Android, routers. Simultaneous Connections: One account, many devices. Unblocking Power: Netflix, Hulu, BBC

This article has been updated by Jamie James on June 9 with the latest data and analysis we have found using real user reports and experiences submitted to ScamAdviser. Just received that terrifying notification? Or perhaps you've noticed suspicious activity in your accounts? Take a deep breath. Your email, password, phone number, home address, payment details, or identity documents may now be in places you cannot control. But the next steps do not have to be confusing. What matters most is how quickly you act, order, and know which exposed data creates the biggest risk. This guide explains what to do after a data breach, how to check the damage, and how to protect yourself from identity theft, account takeover, and follow-up scams. Quick Summary Verify the data breach notice through the company’s official website before clicking any links. Secure your primary email account first because it controls many password resets. Change the exposed password and every reused or similar password. Enable multi-factor authentication on email, banking, payment, cloud, and social accounts. Contact your bank or card issuer if payment or bank account details were exposed. Freeze or protect your credit if sensitive identity information was compromised. Watch for phishing messages, fake refund offers, and scam websites that use your leaked details. Starting with Data Breach Numbers The numbers don't lie: according to a 2024 report, the number of data breach victim notices has grown by a staggering 211% year-over-year. This isn't just a distant threat; it's a stark reality many individuals fa