Scams to Avoid Online

Scams to Avoid Online

The email looks like every other invoice from your supplier. Same logo, same layout, same reference number, one line changed: the bank details. You pay 4.850 € from the company account on a Friday afternoon. On Monday your supplier's bookkeeping asks where the money is. Your bank explains that an authorised credit transfer leaves when you send it, and the receiving account was emptied on Saturday. No fraud team undoes that.

Almost every loss that follows the same shape — an ordinary procedure, executed quickly, against a clock someone else controls. That is why "I would never fall for that" is not protection. Knowing the specific procedure that is being exploited is.

The arithmetic gives most investment scams away

Before any due diligence, do the maths on the promise. Two percent a day sounds modest. Compounded over 250 trading days it is about 14.000 % a year, which turns 500 € into roughly 70.600 €. If that were real, the person offering it would borrow money instead of taking yours.

Investment fraud has three recurring formats. Ponzi schemes pay old investors with new money and need continuous recruitment to survive, which is why they collapse within months of a bad month. Fake trading platforms show you a dashboard, not a market: the gains are a web page, and the withdrawal request is where it ends — usually followed by a demand for "taxes" or "release fees" before your money can leave. And pig butchering builds a relationship first, weeks of friendly messages and a small real withdrawal that works, then a large deposit that does not.

The tell is not the dashboard. It is the channel: a WhatsApp group, an Instagram message, a dating app, a "mentor" who found you rather than the reverse. Every one of those is a place where nobody is licensed to sell you a financial product, and the money moves by crypto transfer that cannot be recalled.

Payments you cannot undo

Four schemes dominate the losses that actually reach a bank.

Fake invoice fraud. A lookalike domain, often one letter different from the real one, or a genuine mailbox that has been compromised so the reply comes from inside the real thread. A payment reminder arrives at month end, when volume hides it.

CEO fraud. A message from the boss's name, or a spoofed version of it, asking for an urgent transfer that has to stay confidential because the deal is not public. Two instructions, and both defeat scrutiny: the amount is plausible, and the secrecy prevents anyone from checking.

Romance and task scams. The romance version runs for weeks, then finds an emergency or an investment tip. The task version needs no relationship at all: a small payment for liking videos or reviewing products, paid out the first time to prove the system works, then a deposit of 50 €, 250 €, 2.500 € required to reach the better-paid tasks. The first payout is the entire trick, and it is cheaper for them than any advertisement.

Fake job offers. A real-looking role, a real-looking contract, sometimes a genuine company name used without permission, and a first week of onboarding by chat. Then the equipment: a laptop and software licence must be bought from their supplier and will be refunded with the first salary, or the overpayment: a cheque for more than the agreed fee, with a request to return the difference before the cheque clears. A remote job that asks you for money in any form is not a job. The same applies to the messenger-only interview, the offer that arrives within a day, and the HR address on a free mail domain.

Phishing and subscription traps. A text about a parcel, a link to a payment page, a call from what looks like your bank's number asking you to confirm a transfer. Subscription traps are quieter and often legal: a free trial that becomes a 39 € monthly charge you never intended, on a card that was stored during checkout. Germany requires a cancellation button for online subscriptions under § 312k BGB; if cancelling means a phone call during business hours, that is the business model.

Pressure needs secrecy and a deadline

Look at what the four schemes share. Each one supplies an urgent deadline and a reason not to verify: confidentiality, a closing window, a relationship you do not want to embarrass.

Break either one and the scheme fails. Call the supplier's number from last year's contract, not the one in today's email. Walk to the manager's desk. Ask for a video call. Set a rule with your own money that any transfer above 1.000 € waits until the next working day — the same rule you would apply to a business.

The first hours after a loss

Speed does more for recovery than anything else, and the first hours are when the money is still traceable. Do not tidy up, do not negotiate, and do not accept a "refund" call.

One more thing about the arithmetic of a five-figure loss: it is recovered by saving and investing, not by a refund. 12.000 € at 200 € a month with a 7% return takes roughly 52 months to rebuild, and that is the honest timeline. It is also the reason the loss hurts less than the belief that someone is about to give it back for one more payment.

The rule that ends most of these

Test the procedure and test the number, not the story. Legitimate money arrives through traceable, regulated channels with a real intermediary who can be named, contacted and reported. When a payment is irreversible, urgent and unverifiable at the same time, that combination is not a detail of how the opportunity works. It is the mechanism of the fraud, described in advance.

Everyone who has been scammed was suspicious at some point, and continued anyway because the request looked ordinary. Ordinary is exactly what the request is built to look like.