Phone scams: types, warning signs, and how to report scam calls

Phone scams — fraudulent calls or texts that exploit fear, urgency, goodwill, or excitement to trick you into giving away money or revealing personal data — remain extremely prevalent in 2025. A 2024 Truecaller study shows 92% of Americans got scam calls and 21% fell victim, pushing fraud losses to a record $12.5B (up 25% from 2023), with people in their 60s being prime targets. With phone scams becoming more advanced thanks to technology such as AI, it’s more important than ever to understand phone fraud and how to protect yourself. Below, we’ll break down common phone scam examples, how to tell if a call is a scam, ways to block phone scams, and how to report a phone scammer to authorities.

Author image

Lukas Grigas

June 16, 2025

18 min read

9 common phone scam types and examples

Phone scams come in many flavors. Here are nine of the most common scam calls you might encounter in 2025, along with real examples and emerging tactics to watch for:

Type 1: Impersonator Scams 

Impersonator scams are perhaps the most popular type of phone scam out there. Usually, the caller pretends to be someone you trust or fear. Government impersonator scams are a classic example: a scam caller claims to be from the IRS, Social Security Administration, FBI, or local police. They’ll warn that you owe taxes or there's an outstanding fine, and demand immediate payment (often by suspicious means like gift cards or wire transfer). 

Another variation is business impersonation: the scammer claims they’re from your bank or from Amazon’s fraud department, stating that “someone’s trying to charge your account” and asking you to verify your card number or one-time passcode. In reality, they’re stealing your credentials. 

Another major category is family emergency impersonation, often referred to as the “grandparent scam.” This is where the caller pretends to be a relative in urgent trouble. Scammers research personal details (often from social media) to make the story convincing. Recently, criminals have started using AI voice cloning to make the impersonation even more believable. In a frightening 2023 case, reported by the Washington Post, a scammer cloned a teen’s voice from online videos and called her parents, mimicking her crying voice to say she’d been kidnapped – all to demand ransom.

Type 2: Debt relief and credit repair scams

During the debt relief and credit repair scams, callers offer phony services to reduce or eliminate your debts or fix your credit score. For a fee up front. You might get a robocall or human telemarketer saying they can lower your credit card interest rates, consolidate or even forgive your student loans, or “repair” your credit history, if you just pay a one-time fee or sign up for their program. Debt relief and credit repair scammers often claim to be with a credit card company, a government debt relief program, or a well-known financial service. Victims who pay these scammers not only lose the fees, but also risk identity theft if they provide personal financial information.

Type 3: Business and investment scams

Business and investment scams, as the name suggests, target individuals with false promises of business opportunities or investment deals. An example is the classic business loan scam: A caller claims your small business is pre-approved for a large loan or grant, but you must pay a processing fee or provide sensitive financial information upfront. Other times, scammers impersonate utility companies or government inspectors, threatening to close your business for non-compliance unless you pay immediately.

Investment scams via phone are also rampant, given that investment fraud losses were the highest of all scams in 2024 ($5.7 billion) according to the FTC. During an investment scam you might get a call pitching a “can’t-miss” investment opportunity. The scammer will pressure you to act now or miss out. If you hear things like “guaranteed high returns” or “once-in-a-lifetime investment, but you must buy in today,” it’s almost certainly a scam. Always be extremely skeptical of investment offers via cold call.

Type 4: Charity scams

Charity scams are designed to exploit your goodwill. These tend to spike after high-profile disasters or around the holidays. For example, after a hurricane or wildfire, scammers will call claiming to collect money for relief efforts, using a name that sounds like a well-known charity. They may even spoof the caller ID to look like a local area code or a name like “Police Fund” or “Firefighter Association.” While many real charities do fundraise by phone, warning signs of a charity scam include: the caller can’t provide details about the supposed charity’s mission, won’t send you information by mail/email, or demands a donation via wire transfer or gift card.

Type 5: Extended car warranty scams

Those annoying “car warranty” robocalls have become infamous in recent years. During the extended car warranty scams, an automated voice  (sometimes a live caller) claims your vehicle’s warranty or insurance is about to expire, and urges you to buy an extended warranty or service contract. If you engage, they’ll ask for personal details about your car or credit card info to “activate” the warranty. In reality, there is no real warranty – it’s either a worthless product or a scheme to get your credit card number. 

Type 6: Tech support scams

Tech support scammers call unsuspecting people and claim to be from a well-known tech company (like Microsoft, Apple, or Google) or an internet/cable provider. They’ll insist that your computer has been infected by a virus or malware, or that your account has been hacked, and they are “here to help.” Often the call is a robocall that leaves an alarming voicemail: “Your Microsoft license key has expired. Press 1 to speak to support.” If you engage, the scammer will try to convince you to grant them remote access to your device so they can “fix” the issue. In reality, once they have remote access, they install malware or steal data, and then charge you for fake services. 

Type 7: Robocalls and spoofed numbers

Robocalls and spoofed numbers are the backbone of phone scams – automated, pre-recorded calls sent out to thousands of phones. Scammers use auto-dialing software to cast a wide net, knowing even a small response rate can yield victims. These robocalls might advertise anything from fake health insurance, car warranties, bogus Apple support, debt relief, lottery winnings, or political and survey scams. The caller ID is often “spoofed”, meaning scammers deliberately falsify the number that appears on your phone. They may display a number that looks local  or impersonate a legitimate entity’s number.

Note: Not all robocalls are scams – some are legitimate automated calls from your pharmacy, school, or bank. But if it’s a sales pitch or urgent demand and you haven’t given written consent to be called by that entity, it’s likely illegal or a scam.

Type 8: Smishing (SMS phishing)

Not all phone scams involve voice calls – smishing refers to scam text messages sent to your phone. Scammers send SMS messages that often contain a link or a phone number to call back, trying to lure you into revealing information or paying money. Common smishing examples include: fake bank fraud alerts (“Your account is locked. Verify now: [phishing link]”), package delivery notices with malicious links, prize or gift card offers, or messages impersonating government agencies (like fake IRS texts about an “unclaimed tax refund”). If you tap the link, it may take you to a phishing website that steals your credentials or installs malware. Smishing is on the rise – in 2024, consumers reported losing $470 million to scams that started with text messages.

Type 9: Vishing (voice phishing)

“Vishing” is just a term for scams conducted through voice calls – essentially all the phone scams we’re discussing. The term emphasizes attempts to phish for sensitive info (such as passwords, Social Security numbers, account logins, or OTP codes) over the phone. The FBI notes that vishing is a growing tactic used by both criminals and even nation-state hackers. Modern vishing may involve AI-powered voice bots that can even respond in real-time, making it harder to immediately recognize a robotic voice. 

How to know you’re being scammed on the phone

To know you’re being scammed on the phone, you need to be aware of the common warning signs that give away the call’s true nature. Here are some red flags that suggest the caller on the other end is a scammer.

Unwanted calls or texts

Be cautious if you receive unwanted calls or texts, especially if it’s about something like winning a prize, a problem with an account you have, or an offer you never inquired about. Scammers often reach out with no prior contact. For example, if you get a surprise call claiming “you’ve won a lottery” (that you never entered) or “this is tech support following up on the virus on your PC” (when you never requested help), it’s almost certainly a scam.

Urgent or threatening language

Scammers frequently use urgent or threatening language to pressure and manipulate you. The caller might adopt a threatening tone, saying things like “This is your final warning”, “If you don’t act now, your account will be closed today”. They want to drive you to panic so you don’t think clearly. Any call that threatens for not immediately complying is a huge red flag. 

Requests for personal or financial information

Be on high alert if a caller asks for financial or personal information like your Social Security number, bank account or credit card numbers, passwords, one-time verification codes, or other sensitive details. Legitimate organizations (banks, Social Security, the IRS, to name a few) will never call you out of the blue asking to confirm sensitive personal information.

Payment demands via gift cards, wire transfers, or cryptocurrency

If the caller instructs you to pay in a very specific, unusual way, that’s almost certainly a scam. Common scammer payment methods include gift cards (they’ll ask you to buy iTunes, Amazon, or Walmart gift cards and read the codes), wire transfer services like Western Union or MoneyGram, prepaid debit cards, cryptocurrency (Bitcoin ATMs or online transfers), or payment apps. They favor these methods because it’s hard to reverse or trace the money – it’s like sending cash. 

Too-good-to-be-true offers

If it sounds too good to be true, it probably is. Unsolicited calls offering unearned rewards – like saying you won a contest or a free vacation, or you qualify for a large loan or grant that you never applied for – are almost always scams. 

Pressure not to hang up or tell anyone

Phone scammers often try to isolate you. They may say “Don’t tell anyone about this” or discourage you from hanging up and calling back later. For example, a fraudster impersonating law enforcement might warn you “This is confidential; don’t discuss it with anyone or you could be in legal trouble.” 

Bad grammar or unnatural speech patterns

Many scam calls originate from overseas call centers. The callers might not speak fluent English or there may be noticeable grammar mistakes, odd phrasing, or heavy accents inconsistent with who they claim to be. Additionally, with the rise of AI-generated voices, you might notice a slightly unnatural tone or cadence. Trust your ears: if something sounds off about how the person talks or the script they’re reading, it could be a scam.

Requests for remote access to your device

No legitimate company is going to randomly call and request for remote access to your device. If someone on the phone asks you to download software, visit a special website, or grant them access to your screen, it’s almost certainly a tech support scam or some other form of fraud. 

Refusal to send written confirmation or let you call back

If you suggest, “Can you send me an official letter or email about this?” and the caller says they cannot, that’s a major red flag. Likewise, if you ask for a callback number or say you’ll call the organization’s main line instead of the number that called you, a scammer will typically resist or give you a fake number. 

How to block and prevent scam calls

Completely blocking unwanted calls or scam calls may not be 100% possible – as long as scammers have phones and an internet connection, they will keep trying. However, you can significantly reduce the number of scam calls you receive. Here are some effective tips to block unwanted calls.

Use your carrier’s scam protection tools 

Major phone carriers in the U.S. offer free or low-cost services to identify and block spam calls. For example, Verizon has Call Filter, AT&T offers ActiveArmor, and T-Mobile has Scam Shield. These services use databases of known scam numbers and AI-driven analytics to label incoming calls as “Scam Likely” or automatically block high-risk calls. 

Install a reputable third-party call-blocking app

In addition to carrier tools, you can install reputable third-party call-blocking apps. Apps like Nomorobo, Hiya, Truecaller, Robokiller, and others maintain massive lists of spam numbers and use algorithms (along with user reports) to detect likely scam calls. For cell phones, these apps can intercept suspicious calls and either label them, send them to voicemail, or block them outright. 

Register your number on the National Do Not Call Registry 

In the U.S., adding your phone number to the National Do Not Call Registry (DoNotCall.gov) is free and simple. Legitimate telemarketing companies are required by law not to call numbers on this list. While this won’t stop criminal scammers, it will greatly reduce the volume of unwanted sales calls from legitimate businesses.

Don’t interact with robocalls 

If you answer a call and realize it’s a recording or an obvious scam, hang up immediately. Do not press any keys or speak commands. Engaging in any way can verify to the scammers that your number is active and will lead to more calls. Likewise, never call back an unknown number that left a vague voicemail – some scam voicemails purposely sound urgent or incomplete to get you to call back.

Limit public exposure of your phone number

Scammers obtain phone numbers from many sources – data breaches, social media, random dialing algorithms, etc. You can reduce your chances of being targeted by keeping your number as private as possible. Be mindful about where you share your phone number. Avoid posting your number on public websites or social media profiles. 

Leverage technology (and AI) in your favor 

As scammers upgrade their tactics with AI, consumers can also benefit from advanced tech to fight back. Many smartphones and phone systems now use AI-based call screening. For example, Google’s Call Screen feature can have an automated assistant answer unknown calls and ask who’s calling – many robocalls hang up when they meet an unexpected interaction. Some call-blocking solutions employ machine learning to recognize patterns of scam calls and block them in real time.

What should you do if you got scammed on the phone?

Realizing you’ve been scammed can be a frightening and upsetting experience. Don’t panic – instead, act quickly to mitigate the damage. Here are the steps to take if you believe you’ve fallen victim to a phone scam.

If you sent money or provided financial information

If you have already sent money or given out your financial information, immediately contact the relevant financial institutions to try to stop or reverse the transaction. The faster you act, the better the chances of recovery. For example:

  • Credit/debit card: Call your card issuer or bank right away and tell them a fraudulent charge or transfer occurred. Ask if they can cancel the payment and refund your money). Most credit cards have zero liability for fraud if you report it promptly.
  • Account (ACH transfer): If money was pulled from your bank account, notify your bank that it was unauthorized. They can initiate an investigation and possibly recall the transfer. 
  • Gift cards: If you paid a scammer with gift card codes, contact the gift card’s customer support immediately. For instance, call the number for iTunes, Google Play, or Amazon and explain the card was used in a scam. They might be able to freeze the remaining balance if it hasn’t been drained yet. 
  • Wire transfer: If you’ve sent a wire through services like Western Union or MoneyGram, call them right away and report it as fraud. They may be able to block the pickup if it hasn’t been collected yet. Similarly, if you wired money via your bank, ask the bank to attempt a recall of the wire. 
  • Payment apps (like Venmo, Cash App, or Zelle): Report the transaction within the app/service as unauthorized. While these peer-to-peer payments are like cash and often not reversible, the provider might flag the recipient for fraud or assist law enforcement.
  • Cryptocurrency: Crypto transactions are usually irreversible, but if you sent crypto through an exchange (like Coinbase or Binance), contact their support to report the wallet address you sent funds to as involved in a scam.

If you provided the scammer personal information

Sharing any personal info with a scammer opens the door to identity theft. Depending on what info was exposed, take steps to protect yourself:

  • Social Security number or ID info: Go to the official identity theft recovery site at identitytheft.gov and follow the guidance to place fraud alerts on your credit, check your credit reports, and report the identity theft. Consider freezing your credit with each major bureau to prevent new accounts from being opened in your name.
  • Bank account numbers, debit card or credit card numbers: Cancel accounts/cards that were exposed and get new ones. Your bank can guide you. They may also advise additional safeguards on your accounts. 
  • Passwords or account logins: Change all potentially affected passwords immediately. If you reused a password on other accounts, change those too. Use strong, unique passwords for each account going forward (consider a password manager, like NordPass). Enable two-factor authentication on important accounts if you haven’t already, or change your 2FA if the scammer got your codes. 
  • Remote access to your device: If you provided a scammer  remote access into your computer or you installed an app they told you to, assume your device is compromised. Disconnect it from the internet. Run a thorough antivirus/malware scan using reputable security software. You may need to seek professional IT assistance to ensure it’s clean. 
  • Email accounts: If you suspect the scammer tricked you into revealing your email or got into your email account, secure it (change password, enable 2FA). Scammers with email access can reset passwords on other accounts by emailing password links, so lock that down fast. To limit email exposure, consider Email Masking services.
  • Identity protection services: Consider using a credit monitoring or identity theft protection service to watch for signs of misuse of your personal data. Keep in mind that  Services like NordProtect are most effective when set up before trouble strikes: they can alert you to new accounts or credit inquiries in your name, monitor the dark web for your info, and assist in recovery if your identity is misused.

How to report phone scams

Reporting scam calls accomplishes two things: it helps authorities track and shut down scammers, and it can help you possibly recover losses or at least document the crime. Here’s how and where to report scam calls in the U.S.

  • Federal Trade Commission (FTC): The FTC is the main U.S. agency that collects fraud reports. If you lost money or the scammer impersonated a business/government entity, submit a report at eportfraud.ftc.gov. Provide as many details as possible: the phone number that called you (even if likely fake), what they said, any names or company names they used, how much you paid, and method of payment. The FTC database (Consumer Sentinel) is accessed by law enforcement agencies nationwide to spot trends and build cases.
  • National Do Not Call Registry (FTC): If you received an unsolicited sales call or robocall but did not lose money, you can report it quickly at donotcall.gov. There’s a “Report Unwanted Calls” option where you provide the scam number and call details. This helps regulators take action against spammers and also aids in tracking which numbers are being used for scams.
  • Federal Communications Commission (FCC): The FCC oversees telemarketing and communications. You can file a complaint at FCC Complaint Center for incidents like robocalls, spoofed caller ID, and do-not-call violations. The FCC uses these complaints to issue warnings or fines to companies and works with carriers to combat illegal spoofing and robocalls. 
  • Internet Crime Complaint Center (IC3): If the phone scam had an online component: for example, the scammer directed you to a fraudulent website or it involved internet services, you can also file a report with the FBI’s IC3 at ic3.gov. IC3 is especially relevant for scams that cross into cybercrime territory.
  • Local law enforcement: As noted, for significant losses or if you need a police report for insurance, you can report the scam to your local police department. They may not investigate international phone scammers, but they will file a report.
  • Notify others: If the scam involved impersonation of an institution (like a bank or government agency), consider informing that institution as well. For example, if someone called claiming to be from “Wells Fargo,” you could contact Wells Fargo’s fraud department. They often keep track of such impersonation scams and can issue warnings to their customers. 
  • Identity protection services: If you use an identity theft protection service such as NordProtect, notify them that you were targeted by a phone scam – especially if your personal info was compromised. Identity theft protection services include recovery assistance or insurance that may reimburse certain losses. In any case, letting them know means they can increase monitoring on your accounts for any suspicious activity.
Author image
Lukas Grigas

Lukas is a digital security and privacy enthusiast with a passion for playing around with language. As an in-house writer at Nord Security, Lukas focuses on making the complex subject of cybersecurity simple and easy to understand.