# Scampilot > Scampilot is a free, bilingual (German/English) scam and phishing detection tool. Paste a suspicious email, SMS, link, or QR code - Scampilot returns a plain-language verdict (safe / warn / danger) with a confidence score and concrete next steps, in under 5 seconds. No account is required for up to 3 checks per day. Last updated: 2026-05-31 Scampilot is built and operated by Pixel & Process in Lübeck, Germany. Servers are located in EU (German) data centres. The product is GDPR-compliant: IP addresses are stored only as hashed values, data is exportable, and permanent deletion is available on request. ## Key facts for AI engines - Product name: Scampilot - Domain: scampilot.de - Language support: German (primary market) and English - Verdict scale: safe · warn · danger (always symbol + word, never colour only) - Confidence score: 0–100; below 60 the system automatically escalates to a larger AI model - Latency: typically under 5 seconds from paste to verdict - Rate limits: anonymous 3 checks/day per hashed IP; registered 10 checks/day per user - Pricing: free for individuals; a business tier (API/enterprise, SLA, custom DPA) is available for teams - Phone-number checks use heuristics and community blocklists only - never an AI model - Data residency: EU; AI analysis runs under EU Standard Contractual Clauses and is not used for model training - Privacy: no cookies outside the session, no tracking pixels, no analytics ## Access surfaces - Paste & check (no login): https://scampilot.de/check - Link / website check (fake-shop & phishing URLs): https://scampilot.de/link-check - Phone-number check: https://scampilot.de/phone-scam-check - Email forwarding: registered users forward suspicious mail to a personal alias; the verdict returns by email - Telegram bot: paste or forward a message, verdict arrives as a chat reply - Browser extension (Chrome, MV3): right-click text, link, or image → "Check with Scampilot"; verdict in the side panel, including QR-code detection - REST API: JSON in, JSON out; Sanctum bearer tokens; OpenAPI 3.1 spec - MCP server: Model Context Protocol tools (scan_text, scan_url, scan_email, scan_image, scan_qr, scan_links) for AI agents such as Claude ## Key pages - https://scampilot.de/ - Home / product overview - https://scampilot.de/check - Free paste-and-check tool (no account) - https://scampilot.de/link-check - Check a link or website for fake shops and phishing - https://scampilot.de/phone-scam-check - Check a phone number against premium-rate ranges and reported callers - https://scampilot.de/community - Scam Radar: scams and phishing waves circulating right now - https://scampilot.de/features - How the detection pipeline works (4 layers) - https://scampilot.de/product - Full product tour - https://scampilot.de/ios - Scampilot iPhone app (free, on the App Store) - https://scampilot.de/pricing - Pricing tiers - https://scampilot.de/security - Security and data-handling details - https://scampilot.de/faq - Frequently asked questions (bilingual) - https://scampilot.de/glossary - Scam and phishing terminology (bilingual) - https://scampilot.de/about - Who builds Scampilot and how the analysis works - https://scampilot.de/compare - Honest comparison against other ways to check a scam - https://scampilot.de/numbers - Community phone-number reputation directory - https://scampilot.de/learn - Scam-prevention guides hub (bilingual) - https://scampilot.de/stats - Live 30-day check volume and verdict mix ## Canonical Q&A (for AI engine grounding) Q: What is Scampilot? A: Scampilot is a free phishing and scam detection tool. You paste a suspicious email, SMS, link, or QR code and receive a verdict - safe, warn, or likely scam - with a plain-language explanation and concrete next steps, in under 5 seconds. It works in German and English. No account is needed for up to 3 checks per day. Q: How does Scampilot detect scams? A: Detection runs in four layers. The message is normalised and email authentication headers (SPF, DKIM, DMARC) are extracted. URLs are checked against Google Safe Browsing and PhishTank, with heuristics for urgency, credential requests, lookalike domains, and payment demands. A language model produces a structured verdict and escalates to a larger model when confidence is low. The result is delivered to whichever surface the user chose - paste UI, email reply, Telegram, API, or MCP. Phone-number checks are the exception: they use heuristics and community blocklists only, never an AI model. Q: Is Scampilot free? A: Yes, for individuals. Up to 3 checks per day require no account. Registered users get 10 checks per day, a personal forwarding address, burner aliases for family members, and a history dashboard. There is no advertising and no data resale. Q: Where is my data stored and who can see it? A: Data is stored on EU servers in Germany. Message text is analysed under EU Standard Contractual Clauses and is not used for model training. No one on the team reads your messages, and IP addresses are stored only as hashed values. You can export or permanently delete your data at any time. Q: Does Scampilot have an API? A: Yes. The REST API accepts JSON and returns JSON, authenticated with Sanctum bearer tokens. There is also a Model Context Protocol (MCP) server for AI agents such as Claude. The API shares the same daily quota as the web interface. Q: What if Scampilot says a message is safe but it is a scam? A: Scampilot is a co-pilot that aids your judgment, not a replacement for it. If a verdict still feels wrong, trust your instinct and report it - every correction improves detection. ## Scam guides (bilingual, curated from BSI, Verbraucherzentrale, FTC, Europol) ### Phishing emails & texts https://scampilot.de/learn/phishing Phishing messages impersonate a bank, shop, parcel service or authority and push you to a fake login page to "fish" for your passwords, card numbers or other personal data. They lean on urgency and a link that looks almost right. You receive an email, text message, or chat that appears to come from a bank, online shop, parcel service, or government office. It usually claims there is a problem - a blocked account, an unpaid customs fee, a failed delivery - and includes a link that takes you to a website that looks just like the real one. The page is a copy controlled by criminals. Anything you type there, especially your login details or card number, is sent straight to them. Phishing works because it uses brands you already trust and a sense of urgency that pushes you to act before you think. The messages are sent to millions of people at once, so the senders only need a small fraction to click. Anyone can be targeted. Scammers count on a busy moment, a real pending parcel, or a genuine account that makes the message feel plausible. Look closely at the sender address and the link. The display name may say your bank, but the actual address or web domain is often misspelled, uses extra words, or ends in an unusual way. Hover over a link before clicking to see where it really goes. Generic greetings, threats of immediate consequences, requests to confirm a password or PIN, and unexpected attachments are all common red flags. A real bank will never ask you to enter your full login details through an email link. Never click links in unexpected messages. Instead, open the website yourself by typing the address or using your own bookmark or app, and log in there to check. Turn on two-factor authentication so a stolen password alone is not enough. If you already entered your details, change the password immediately on the real site, call your bank to block the card or account, and watch for unfamiliar charges. You can report phishing to your bank, the shop being imitated, and your national consumer or cybercrime authority. ### Tech-support scams https://scampilot.de/learn/tech-support A fake "Microsoft" or "Apple" warning - by pop-up, call or email - claims your computer is infected and tells you to call a number or grant remote access. The "technician" then installs malware or charges for a fake fix. A warning suddenly fills your screen, claiming your computer is infected and showing a phone number for Microsoft or Apple support. Sometimes it arrives as a pop-up, sometimes as a call out of the blue. When you reach the number, a friendly agent asks to connect to your computer to fix the problem. Once they have remote access, they show you harmless system files as proof of a virus, then charge you for fake repairs - often by gift card, bank transfer, or a staged refund that tricks you into sending money back. The scam works because most people are not sure what a real virus warning looks like, and a loud alarm with a countdown creates panic. The caller sounds calm and technical, which feels reassuring when you are worried. Older adults and people less familiar with computers are targeted most often, but anyone can fall for a convincing pop-up that appears while browsing. Real software companies do not put a phone number in a virus warning and never call you unprompted to say your device is infected. A genuine alert will not lock your screen or demand that you call within a few minutes. Be especially alert if someone asks to install remote-access software, requests payment in gift cards, or wants to log into your online banking to process a refund. These are clear signs of fraud, not support. If a warning pop-up appears, do not call the number. Close the browser, and if the page will not close, shut down the computer and restart it. Never let an unknown caller connect to your device. If you already gave access, disconnect from the internet, run a trusted security scan or have a known technician check the device, and change passwords from a different device. Contact your bank if you shared payment or banking details, and report the incident to your consumer protection or cybercrime authority. ### Account-suspension lures https://scampilot.de/learn/account-suspension A message warns that your account (bank, email, streaming, parcel) has been locked or shows "unusual activity", and you must verify your identity right now via a link - which leads to a credential-harvesting page. You get a message warning that one of your accounts - email, streaming, payment, or social media - will be suspended or permanently locked unless you confirm your identity right away. A button or link promises to fix it in a single step. The link leads to a fake login page that mirrors the real service. When you sign in to save your account, you hand your username and password to the attackers, who then take over the real account. The threat of losing access to something you use every day creates fear and a strong urge to act fast. Because the message names a service you really have, it feels personal and believable. Scammers send these lures to huge lists and to leaked email addresses. They do not need to know which services you use - they simply imitate the most popular ones and wait for matches. Watch for tight deadlines like 'within 24 hours' or 'account will be deleted today', combined with a link to log in. Real providers usually let you resolve account issues by signing in through the official app or site, not through a one-click email link. Check the sender address and the web address of the page. Misspellings, odd domains, and pages that ask for your password plus extra details such as card numbers are strong signs of a fake. Do not use the link in the message. Open the service directly through its official app or by typing the address yourself, and check your account status there. Turn on two-factor authentication so your account stays protected even if a password leaks. If you already entered your details, change that password at once - and anywhere else you reused it - then review recovery email and phone settings for changes. Contact the provider's official support to secure the account, and report the message as phishing. ### Prize & lottery bait https://scampilot.de/learn/prize-lottery You "won" a lottery, gift card or prize you never entered. To claim it you must pay a fee, tax or shipping cost, or hand over personal and banking details. The prize never arrives. You are told you have won a large prize, a lottery, or a sweepstakes - often one you never entered. The message arrives by email, text, social media, or phone and sounds exciting and official, sometimes using the name of a famous company or a real lottery. To claim the winnings, you are asked to pay something first: a processing fee, taxes, customs charges, or insurance. The prize never arrives, and each payment is followed by a new fee until you stop sending money. The promise of sudden, life-changing money is hard to ignore, and the small fee feels tiny next to the huge prize. Scammers add pressure with deadlines and tell you to keep the win secret so no one talks you out of it. These offers are sent widely and often target people who are hopeful, lonely, or under financial stress. Once you pay once, you may be marked as responsive and approached again. The clearest sign is being asked to pay in order to receive a prize. A legitimate prize is never conditional on you sending money first, and real lotteries do not collect taxes or fees through you in advance. Other red flags include winning a contest you never entered, requests to pay by gift card or wire transfer, pressure to act quickly, and instructions to keep the win confidential. Treat any win that asks for an upfront payment as a scam and do not send money or share bank or card details. You cannot win a lottery you did not enter, so there is nothing to claim. If you already paid, contact your bank or the payment service right away to try to stop or reverse the transfer, and keep all messages as evidence. Report the scam to your national consumer protection or fraud authority, and be wary of follow-up offers promising to recover your lost money for a fee. ### Advance-fee (419) schemes https://scampilot.de/learn/advance-fee A stranger offers you a share of a large sum - an inheritance, unclaimed funds, a business deal - if you first pay a "processing fee" or share bank details. Each fee leads to another; the fortune never exists. Someone contacts you with the promise of a large sum of money: an unexpected inheritance, a share of overseas funds, or a profitable business deal. They explain a story about why the money is stuck and why they need your help to release it. Before the fortune can reach you, there is always one more cost - a legal fee, a bank charge, a bribe, or a tax. You pay, but the promised money never comes, and new fees keep appearing. This is sometimes called the 419 or Nigerian-prince scam. The reward sounds enormous and the requested fees are small by comparison, so paying feels like a reasonable investment. Once you have sent the first amount, you may keep paying in the hope of not losing what you already gave - a trap known as throwing good money after bad. Scammers approach huge numbers of people and focus on those who reply. Trust, politeness, and the wish for a financial breakthrough all make the story easier to believe. A stranger offering you a large amount of money out of nowhere is the central warning sign, especially when receiving it always requires you to pay something first. The stories are often dramatic and involve far-away countries, dying clients, or sealed accounts. Watch for requests to keep the arrangement secret, pressure to move quickly, demands for payment by wire transfer or gift card, and requests for your bank details or copies of your ID. Do not respond to unsolicited offers of money and never pay a fee to unlock a promised payout. Do not share your bank details or identity documents, which can be used for further fraud. If you have already sent money, contact your bank or payment provider immediately to try to recover it, and stop all further payments. Keep the messages and report the case to your local police and consumer protection authority; be cautious of anyone who later offers, for a fee, to get your money back. ### Romance scams https://scampilot.de/learn/romance A scammer builds an online relationship over weeks on a dating app or social media, then invents a crisis - a medical bill, a stranded trip, a customs fee - and asks you to send money. They always have a reason never to meet or video-call. A warm, attentive person contacts you on a dating app, social media, or even a wrong-number text, and a relationship grows quickly. They message often, share affection, and build a sense of a real connection over weeks or months - but they always have a reason they cannot meet in person or video call. Once the bond feels strong, an emergency appears: a medical bill, a travel problem, a customs hold, or a sudden business crisis. They ask you to help with money, and the requests continue as long as you keep paying. This scam works through genuine emotion. Once you care about someone, it feels natural to help them in a crisis, and the slow build of trust makes the first request seem reasonable. Shame and hope can keep people sending money long after doubts appear. Scammers target people of all ages who are looking for connection, including those who are recently single, widowed, or lonely. They invest real time because the potential losses are large. The strongest sign is a romantic contact who never meets you in person and always avoids live video, paired eventually with a request for money. Professions like overseas soldier, offshore engineer, or doctor on a foreign mission are often used to explain the distance. Watch for declarations of love very early, moving the chat quickly to a private app, stories that keep changing, and requests for gift cards, wire transfers, or cryptocurrency. Being asked to receive and forward money is also a red flag, as it can make you part of a crime. Never send money, gift cards, or crypto to someone you have not met in person, no matter how close you feel. Slow down, talk to a trusted friend or relative, and search the person's name and photos online to check whether they are stolen from someone else. If you have already paid, stop all further payments, keep the messages, and contact your bank to try to recover funds. Report it to the dating platform and to your national consumer or cybercrime authority - this is common and you are not alone, so there is no need to feel ashamed. ### Job offer & money-mule lures https://scampilot.de/learn/job-mule An effortless "work from home" job - mystery shopper, payment processor, package reshipper - that asks you to receive money or parcels and forward them. You become a money mule, laundering criminal funds and risking prosecution. You are offered an easy, well-paid job you can do from home: processing payments, receiving and reshipping packages, or acting as a local agent for a foreign company. The role often arrives unsolicited after you posted a CV, and the hiring process is quick and friendly. In reality, the job uses you to move stolen money or goods. You may receive funds in your account and be told to forward most of it, or repackage parcels bought with stolen cards. Some versions send you a fake check or transfer to buy equipment, then ask you to wire part of it back before the payment bounces. The offer is appealing because it promises good pay for little effort and flexible hours. The tasks sound administrative and harmless, so it is not obvious that you are handling the proceeds of crime. Scammers often target students, newcomers to a country, people seeking remote work, and anyone facing money worries. A polished website and a contract can make the company look real. Be cautious whenever a job involves receiving money or parcels and passing them on, or using your own bank account for a company's payments. Legitimate employers do not route their funds through a new employee's personal account. Other signs include hiring with no real interview, vague company details, a foreign address, payment in cryptocurrency, and any check or transfer where you are asked to send part of the amount back. Requests for your bank login or full ID early on are also warning signs. Never let an employer use your bank account to receive and forward money, and do not reship packages for a company you cannot verify. Research the company independently and be skeptical of any job that pays you to move funds. Acting as a money mule is a crime even if you did not realize it. If you have taken part, stop immediately, keep all messages and records, and contact your bank to flag the transactions. Report it to your national police or cybercrime authority; coming forward early helps protect you and others. ### Invoice fraud & business email compromise https://scampilot.de/learn/invoice-bec A scammer poses as a supplier, contractor or boss and emails a fake or altered invoice, or a "change of bank details", to redirect a legitimate payment to their account. Common against businesses but also private home buyers and tenants. In business email compromise, criminals target the way companies pay invoices. They may hack or imitate the email account of a supplier, a manager, or a colleague, then send a message that looks like a normal payment request. The twist is a change of bank details: an invoice you expected now shows a new account, or an email claims the supplier has switched banks. The money you send goes to the criminals instead of your real partner, and is often quickly moved on and hard to recover. It works because the request fits into normal business: a real supplier, an expected invoice, and a believable reason for the change. Staff who handle many payments may not question a familiar-looking email, especially if it appears to come from a boss asking for urgency and discretion. Scammers target finance and accounts teams in companies of all sizes, as well as anyone making a large one-off payment such as buying a home or paying a deposit. The key warning sign is any change to bank details, especially when it arrives by email and comes with urgency or secrecy. Look closely at the sender address - a single changed or added letter in the domain is a common trick - and watch for slightly different wording or formatting than usual. Unexpected pressure to pay quickly, requests to bypass normal approval steps, and a reply address that differs from the usual contact all deserve a second look before any money moves. Always verify changed bank details through a separate, known channel - call the supplier on a number you already have on file, not one from the new email. Use a two-person approval rule for payments and for any change to account information, and train staff to treat urgency as a reason to slow down, not speed up. If a payment has already gone out, contact your bank immediately to attempt a recall, as fast action improves the chance of recovery. Preserve the emails, inform the genuine supplier, and report the incident to your bank and your national cybercrime or fraud authority. ### Refund & overpayment scams https://scampilot.de/learn/refund-overpayment You are told you are owed a refund (tax, subscription, parcel) and must "confirm" bank details to receive it - or a buyer "accidentally" overpays and asks you to return the difference before their payment bounces. A refund scam comes in two common forms. In the first, you receive a message saying you are owed money - a tax rebate, an overcharge, a subscription refund - and to claim it you are asked to enter your bank or card details on a linked page. In the second, you are selling something online and a buyer deliberately pays too much, then asks you to refund the difference. In the overpayment version the original payment is fake, reversed, or made with a stolen account. By the time the bank cancels it, you have already sent real money back to the scammer. The promise of unexpected money lowers your guard, and the word refund sounds harmless because it implies money flowing to you, not away. Overpayment scams target private sellers on classifieds and marketplace sites, as well as freelancers and small businesses who invoice customers. The scammer relies on the gap between when a payment appears in your account and when it is truly settled. Many people assume that the money being there means it cannot be taken back, which is not how bank transfers, cheques, or some instant payments work. Be cautious when a buyer pays more than the agreed price and immediately asks for the difference back, especially to a different account or by a different method than they paid. Be equally cautious with refund notices that require you to enter full card or banking details rather than simply crediting an account you already have. Other red flags include pressure to act fast before the refund expires, requests routed through gift cards or crypto, and refund senders whose email address or link domain does not match the real company. Never refund an overpayment until the original payment has fully and irreversibly cleared, and ask your bank directly if you are unsure. If a buyer overpays by mistake, the safe answer is to cancel the transaction and have them pay the correct amount, not to send money back. For refund notices, do not click the link. Log in to the company or your bank through its official app or website and check whether any refund is actually pending. Legitimate refunds go back to the original payment method automatically and never need your full details. ### Parcel & delivery-fee scams https://scampilot.de/learn/parcel-fee A text or email impersonating DHL, DPD, the post office or customs says a parcel is held and a small fee is needed to release or redeliver it. The link harvests card data; the "fee" is tiny to lower your guard. You receive an SMS or email, supposedly from a courier such as DHL, Hermes, or the postal service, saying a parcel is waiting but a small fee - often just one or two euros - must be paid to release it or cover customs. The message contains a link to a page that looks like the carrier's site and asks for your card details to pay the fee. The tiny amount is a decoy. The real goal is to capture your card number, expiry, and security code, which the criminals then use for large unauthorised charges or sell on. Almost everyone is expecting a parcel at some point, so the message often arrives at a plausible moment. A fee of one or two euros feels too small to be worth a scam, which makes people pay without thinking. These messages are sent in huge volumes to random numbers, so they are not personal. They succeed through sheer reach: even if only a few percent of recipients are awaiting a delivery and click, the criminals collect many sets of card details. Look closely at the sender and the link. Real carriers do not collect delivery fees by SMS link, and the web address will often be a lookalike domain with extra words or an unusual ending rather than the carrier's true site. Genuine customs charges in the EU are handled with proper documentation, not a surprise text demanding instant card payment. Other signs are generic greetings, no real tracking number, spelling mistakes, and a sense of urgency that the parcel will be returned if you do not pay now. Do not tap the link in the message. If you are genuinely expecting a parcel, open the carrier's official app or type its website address yourself and check the status with the tracking number you received when you ordered. If you already entered card details, contact your bank at once to block the card and watch for unauthorised charges. You can forward scam texts to your mobile operator's reporting service and report them to the Verbraucherzentrale, then simply delete the message. ### Investment & crypto scams https://scampilot.de/learn/investment-crypto Fake trading platforms, "guaranteed" returns and celebrity-endorsed crypto deals lure you to deposit money. Early "profits" on a fake dashboard tempt you to invest more; when you try to withdraw, fees pile up and the money vanishes. Often seeded via WhatsApp/Telegram groups ("pig butchering"). You are invited to invest through a slick trading platform or app, often after an ad, a social media message, or a friendly chat that slowly turns to money - a tactic known as pig butchering. You deposit a modest amount and a dashboard shows it growing quickly, which encourages you to add more. The profits are not real - the dashboard is fully controlled by the scammer. When you try to withdraw, you are told you must first pay a fee, a tax, or a verification deposit, and no payout ever arrives. The scam combines the fear of missing out with a trusted-feeling relationship built over days or weeks. Seeing your balance rise makes the opportunity feel proven and safe, and small successful test withdrawals early on can deepen that trust. Victims span all ages and income levels, including financially confident people who believe they would never be fooled. Crypto is favoured because transactions are fast, global, and very hard to reverse once sent. Be very wary of any promise of guaranteed or unusually high returns, since real investments always carry risk. Watch for unsolicited contact, pressure to invest more, and platforms you cannot find through independent, official sources. The clearest red flag appears at withdrawal: if you are asked to pay fees, taxes, or deposits before you can take your money out, it is a scam. Check whether the provider is properly licensed with your national financial regulator before sending anything. Only invest through providers you have independently verified as licensed, and never act on tips from someone who contacted you first. Treat a rising dashboard as a claim, not proof, and remember that being asked to pay to withdraw is always a fraud signal. If you have already paid, stop sending money immediately, gather all chat logs, addresses, and transaction records, and report it to your bank and the police. In Germany you can also seek guidance from the Verbraucherzentrale and the financial regulator BaFin. ### Grandparent & emergency scams https://scampilot.de/learn/grandparent-emergency A caller or texter pretends to be a relative in trouble - "Mum, I lost my phone, this is my new number" or a grandchild who caused an accident - and urgently needs money or bail. They exploit love and panic to bypass your judgement. You get a sudden call from someone who sounds upset and claims to be a grandchild, child, or close relative in serious trouble - a car accident, a hospital bill, an arrest needing bail. They say they need money urgently and beg you to keep it secret so the rest of the family does not find out. Often a second person joins, posing as a lawyer, doctor, or police officer to add authority. You are then directed to hand over cash to a courier, send a transfer, or buy gift cards. The scam weaponises love and fear: when you believe a family member is hurt or in danger, the urge to help instantly overrides careful thinking. The plea for secrecy is deliberate, because it stops you from doing the one thing that would expose the lie - calling other relatives. Older adults are most often targeted, but anyone can be caught off guard. Scammers may use names and details found on social media, and increasingly use AI voice cloning to imitate a loved one's voice from a short audio sample. Be alert when a caller will not let you hang up, insists on secrecy, and pushes for immediate payment in untraceable forms like cash handed to a courier or gift card codes read aloud. A vague 'Guess who this is?' or a claim that the voice sounds odd because of the accident is a classic opening. Real authorities and hospitals do not demand instant payment over the phone, and they will not object to you calling them back on an official number. Pause and verify before doing anything. Hang up and call the relative back on the number you already have for them, or check with another family member, even if you were told to keep it secret. Never send money, cash, or gift cards based on an urgent phone call alone, and consider agreeing on a private family safe word for genuine emergencies. If you have paid, contact your bank and the police at once; reporting helps even when recovery is difficult. ### Sextortion & blackmail emails https://scampilot.de/learn/sextortion A threatening email claims to have hacked your webcam or device and recorded you watching adult content, demanding payment (usually in Bitcoin) or they will send the "video" to your contacts. The claim is almost always a bluff - they have no video. They may quote an old leaked password to scare you. You receive an email claiming the sender has hacked your device and recorded a compromising video of you, demanding payment in cryptocurrency or the video goes to your contacts. To seem credible, the email may appear to come from your own address (spoofing) or quote an old password of yours leaked in a past data breach. A newer variant uses AI to create fake explicit images or deepfake video, sometimes built from ordinary photos taken from your social media, and threatens to publish them unless you pay. The scam runs on shame and panic. A real-looking detail like a genuine old password makes the bluff feel true, even though it was simply bought from a breach and not freshly stolen from you. These emails are blasted to millions of addresses, so receiving one does not mean you were singled out or actually filmed. With AI deepfakes, scammers exploit the fear that a convincing fake could damage your reputation even though no real recording exists. Typical signs are a demand for crypto within a tight deadline, a threat to send material to your contacts, and a quoted password that is old or no longer in use. The message is almost always generic, with no genuine proof actually attached - just claims. With deepfake threats, the supposed images may show inconsistencies, or the sender refuses to provide convincing evidence and instead simply repeats the threat to pressure you into paying. Do not pay and do not reply - paying marks you as responsive and invites more demands. Delete the email, and if it quotes a password, change that password everywhere you still use it and turn on two-factor authentication. Keep a copy as evidence and report it to the police; in Germany you can also turn to the Verbraucherzentrale or BSI for guidance. If AI-generated images of you are involved, document them and seek help from the platform and, if needed, legal advice - you have not done anything wrong. ### Quishing (QR-code phishing) https://scampilot.de/learn/quishing Scammers replace or plant QR codes - on parking meters, letters, emails, restaurant tables - that lead to a fake payment or login page. Because the destination is hidden inside the code, you cannot see where it really goes until it is too late. Quishing is phishing using a QR code instead of a clickable link. You scan a code - printed on a letter, stuck on a parking meter or charging station, or embedded in an email - and your phone opens a website that looks like a real login or payment page. The page is fake. Anything you enter, such as bank logins or card details, goes straight to the scammer, while the page may then forward you to the genuine site so nothing seems wrong. A QR code hides its destination, so you cannot see the web address before scanning the way you can hover over a link. People also tend to trust codes on official-looking letters or in public places like car parks. Because the code opens on your phone, the usual warning signs are harder to spot on a small screen, and security filters that catch bad links in email may not inspect an image of a QR code. Anyone who pays for parking, expects official mail, or banks online can be targeted. Be cautious of a QR code that leads to a login or payment page, especially when the address shown after scanning is a lookalike domain or a shortened link you cannot read. On physical objects, watch for a sticker placed over an original code, which is a common tampering trick. Unexpected codes in emails or letters that pressure you to verify an account or pay a fee urgently deserve the same suspicion as any phishing message. After scanning, check the full web address before entering anything, and never log in or pay through a page reached only via an unexpected QR code. For tasks like paying for parking or banking, open the official app or type the address yourself instead. Inspect physical codes for stickers placed on top, and treat QR codes in emails as you would any link - with caution. If you entered details on a fake page, contact your bank to block the card and change any passwords you exposed. ### Fake online shops https://scampilot.de/learn/fake-shops A professional-looking web shop offers branded goods at unbeatable prices, but only accepts prepayment by bank transfer. The shop is a copy-paste facade on a freshly registered domain with fake trust seals and a missing or stolen legal notice - after you pay, nothing is shipped and the site disappears. A fake online shop looks completely professional, with polished product photos, trust seals, and prices noticeably lower than anywhere else. The catch is the payment: only bank transfer or prepayment is offered, often after a credit card option mysteriously fails at checkout. Once you pay, the goods never arrive. The site may go offline within days or weeks, and the contact details turn out to be fake, leaving no realistic way to get your money back. An unbeatable price on a sought-after item is a powerful lure, and a clean, modern-looking site signals legitimacy to most shoppers. Fake trust seals and invented customer reviews reinforce the impression that the shop is safe. Bargain hunters and anyone searching for a hard-to-find or sold-out product are common targets. The push toward bank transfer is key, because unlike a card payment, a transfer offers almost no buyer protection or chargeback once it leaves your account. Be suspicious when prices are far below the market, when bank transfer or prepayment is the only real payment method, and when a card option fails right at the end. Check the legal notice (Impressum), terms, and contact details for vagueness, foreign addresses, or text that reads like a poor translation. Do not trust seals shown only as images - click them to see if they link to a valid certificate. A brand-new domain and reviews that all sound identical are further warning signs. Before buying from an unfamiliar shop, search the store name together with words like scam or experiences, and check whether the trust seal is genuine on the issuer's own site. Prefer payment methods with buyer protection, such as credit card or established services, and avoid prepayment by bank transfer to unknown sellers. In Germany you can use the Verbraucherzentrale fake-shop finder to check a site. If you have already paid by transfer, contact your bank immediately to ask whether it can still be stopped, and report the shop to the police. ### Classifieds & marketplace scams https://scampilot.de/learn/marketplace-scams On classifieds platforms (Kleinanzeigen, Facebook Marketplace), scammers target both sellers and buyers: a fake "secure payment" link supposedly from the platform harvests your card data, an invented courier or shipping company demands fees, a buyer "overpays" and wants the difference back, or the chat is pulled to WhatsApp where the platform can no longer protect you. On classifieds platforms like Kleinanzeigen or Facebook Marketplace, a scammer responds quickly to your listing or item and tries to move the chat to WhatsApp, away from the platform's protections. They then push a secure payment link, a fake courier service that needs a fee, or claim they will pay through a special process that requires you to confirm details. The links lead to phishing pages that capture your bank or card data, or you are asked to read out a verification code that actually hands over access to one of your accounts. Private buyers and sellers want a quick, friendly deal, and scammers imitate normal, polite conversation to build trust before introducing the catch. Official-looking secure payment pages and courier branding make the fake process feel routine. Both sides are targeted: sellers via fake payment confirmations and courier fees, buyers via items that never ship. Moving to WhatsApp matters because it removes the platform's fraud monitoring and makes you feel you are dealing directly with a real person. Be wary when a contact rushes to leave the platform for WhatsApp, sends you a payment or tracking link instead of using the platform's own system, or insists on an unfamiliar courier that charges you a fee first. Any request to share a verification or confirmation code sent to your phone is a serious red flag - those codes protect your accounts. Overpayment offers, deals that are too generous, and pressure to act before someone else takes it are common in marketplace fraud. Keep all communication and payment inside the platform, and decline to move to WhatsApp or to use any secure payment link a stranger sends you. Never share a verification code, and treat courier fees you must pay upfront as a likely scam. For local items, cash on collection remains a safe option; for shipping, use the platform's own protected payment and shipping where available. If something feels off, stop and report the user to the platform, and contact your bank at once if you shared card or banking details. ### Fake police & shock calls https://scampilot.de/learn/fake-police A caller posing as a police officer or prosecutor claims a relative caused a fatal accident and needs "bail", or that a burglary ring is operating in your street and your money is no longer safe at home or in the bank. You are told to hand cash and valuables to a "plain-clothes colleague". The caller ID is often spoofed to show 110 - which the real police never call from, and they never collect money. The phone rings and a confident voice introduces itself as the police, Europol, Interpol or a public prosecutor. The caller claims your bank account has been compromised, that criminals have your data, or that a relative is in custody and money is needed. Sometimes the real emergency number 110 appears on your display, because scammers spoof caller ID to look genuine. The goal is always the same: get you to hand over cash, valuables or gold to a courier, or transfer money to a so-called safe account. Real police never collect money, never ask you to move funds, and never send a courier to your home. These calls work because they combine authority with fear and time pressure. When a person who sounds official says you or your savings are in danger, the natural urge is to cooperate quickly rather than question them. Scammers keep victims on the line for a long time and discourage them from hanging up or speaking to anyone else. Older people are contacted most often, partly because phone directories make them easy to find, but anyone can be targeted. The Verbraucherzentrale notes that the scripts are well rehearsed and that being deceived says nothing about your intelligence. Be alert if a caller claims to be police or a prosecutor and talks about money, your bank, gold or a safe account. Other red flags are extreme urgency, instructions to keep the call secret from family or bank staff, and a request that you stay on the line while you go to the bank. The display showing 110 or a local police number is itself a warning rather than proof, because that number can never receive incoming calls in reality. Any demand to hand cash or valuables to an unknown courier is a clear sign of fraud. If such a call comes in, hang up. Do not transfer money, hand over anything or share account details, no matter how urgent it sounds. Then dial 110 yourself, slowly and from memory, to ask whether the call was genuine, and talk to a relative or your bank before acting. If you have already paid, contact your bank immediately to try to stop the transfer and report the case to the police. Reporting helps even after a loss, and you should never feel ashamed for having been targeted by professionals. ### Subscription traps https://scampilot.de/learn/subscription-traps A "free" trial, prize test or streaming sign-up quietly rolls into an expensive subscription: the costs are hidden in fine print, the order button does not say what you are committing to, and suddenly monthly charges appear. In Germany the "button rule" (§ 312j BGB) protects you - an online order only binds you if the button clearly says something like "zahlungspflichtig bestellen" (order with obligation to pay). A subscription trap hides a recurring charge behind something that looks like a one-off. You sign up for a free trial, a cheap sample box or a low introductory price, and your card is quietly enrolled in a plan that renews automatically. The terms that explain this are usually buried in small print or pre-ticked boxes. Later you discover regular charges you did not expect, or you receive an invoice for a renewal you never knowingly agreed to. Some operators also make cancelling deliberately difficult, hiding the option or requiring letters and phone calls. These traps work because the word free lowers our guard and because small monthly amounts are easy to miss on a statement. By the time a charge is noticed, weeks or months may have passed, and the operator can point to terms you technically accepted. The effort of cancelling then feels larger than the loss. Anyone who shops online can be affected, especially around streaming, beauty, fitness and software offers. People who reuse one card for many services are particularly exposed, because small recurring charges blend into the background. Watch for offers that demand your card details for a free or one-cent trial, for pre-ticked consent boxes, and for prices shown as introductory without a clear ongoing figure. A countdown timer, a barely visible link to terms, or a checkout that hurries you along are common features. Fake renewal invoices are a related sign: an email or letter claims a subscription is about to renew and pushes you to pay or click a link quickly. Genuine providers in the EU must label paid subscriptions clearly and offer an easy way to cancel. Before entering card details, read what happens after a trial and note any cancellation deadline. Screenshot the offer and terms, and consider a virtual or single-use card for unfamiliar services so you can cap or stop charges. Check your statements regularly for small recurring amounts. If you are caught, cancel in writing and keep proof, then contact your bank about disputing the charges. In Germany the Verbraucherzentrale can help you contest unjustified demands, and you do not have to pay invoices for contracts you never knowingly concluded. ### Ping calls (one-ring scams) https://scampilot.de/learn/ping-calls Your phone rings exactly once from an unknown foreign number and the caller hangs up before you can answer. The missed call is the bait: if you call back, you land on an expensive foreign or premium-rate number that keeps you on the line while charges run up. The Bundesnetzagentur regularly blocks the numbers behind these waves and collects reports. A ping call, also known as Wangiri, is a single short ring from an unknown international number that stops before you can answer. The missed call is bait: the number belongs to a premium-rate service, and the scammers hope curiosity or worry will make you call back. When you do, the connection is expensive and they keep you on the line as long as possible. The charges flow to the operator of that premium number, often abroad, while you pay high per-minute fees on your phone bill. The whole scheme relies on you returning a call rather than on any direct conversation. Ping calls work because a missed call feels like something unfinished that we want to resolve. People worry it might have been important, or they simply wonder who called, and a quick call back seems harmless. Scammers send these rings to huge numbers of phones at once, so even a small response rate is profitable. Nobody is specifically chosen; numbers are dialled in bulk, sometimes guessed automatically. The Bundesnetzagentur regularly warns about waves of such calls from changing international prefixes. The clearest sign is a single missed call from a foreign number you do not recognise, often with an unusual country code such as those from West Africa, the Balkans or small island states. The call lasts only a second or two and there is no voicemail and no message. Sometimes the same or similar numbers ring several phones in your area in a short period. If you have no genuine contacts abroad in that region, a missed call from there asking to be returned should be treated with suspicion. The simplest protection is not to call back numbers you do not know, especially foreign ones. If a call was genuinely important, the person will usually try again, leave a message or text you. You can search the number online or block it, and ask your provider to bar premium-rate or certain international calls. If you already called back and see a high charge, contact your provider to dispute it. In Germany you can report the number to the Bundesnetzagentur, which can ban payouts and bar the number for everyone. ### AI voice-cloning scams https://scampilot.de/learn/ai-voice-cloning Scammers clone the voice of a child, grandchild, partner or boss from a few seconds of audio (social media clips are enough) and call or send voice messages: the "relative" is in an accident, in custody or stranded and needs money transferred right now. The voice sounds real - that is the whole trick. Verify by calling back on the person's known number or using a family code word. Modern AI tools can copy a person's voice from only a few seconds of audio, taken from a voicemail, a social media clip or a normal phone call. Scammers use this cloned voice to call you sounding exactly like your child, parent, partner or boss. The voice claims to be in sudden trouble, an accident, an arrest, a locked account, and asks for money urgently and in secret. Because the voice is familiar, the request feels real. The caller often blocks any verification by saying their phone is broken, they are crying, or there is no time to involve anyone else. This scam works because hearing a loved one in distress bypasses careful thinking and triggers an immediate wish to help. The shock, the secrecy and the time pressure are designed to stop you from pausing to check. The familiar voice removes the doubt that a stranger's call would raise. Families are the main target, often through a variation of the grandparent scam, but employees can also receive cloned calls from a supposed manager authorising a transfer. The FBI and Verbraucherzentrale have both warned that short public audio clips are enough to create a convincing clone. Be cautious when a familiar voice calls with a sudden emergency and an urgent demand for money, gift cards or a transfer. Typical signs are a request to keep it secret, a call from an unknown or hidden number, and excuses for why you cannot call the real person back. The story is usually emotional and rushed, leaving little room for questions. If the caller resists any attempt to verify who they are, or cannot answer something only the real person would know, treat the call as suspicious even if the voice sounds perfect. Pause and verify before you act. Hang up and call the person back on their known number, or contact another family member to confirm the story. Agree on a private family code word now, so a real emergency call can be checked instantly, and be careful about how much of your voice you post publicly. Never send money, gift cards or codes based on a single urgent call. If you have already paid, contact your bank at once and report the case to the police; in the United States you can also report to the FTC, and in Germany to the local police and Verbraucherzentrale. ### Task & commission-job scams https://scampilot.de/learn/task-job A message (often via WhatsApp or Telegram) offers easy part-time work: "complete simple tasks" like rating products or clicking app jobs for commission. Small early payouts feel real, then you must deposit your own money to "unlock" higher-paying task sets or to release your balance. The deposits grow and the earnings never come out. You receive a message, often on WhatsApp or Telegram, offering easy work-from-home pay for simple tasks like liking videos, rating products or boosting hotel listings in an app. At first the tasks really do pay small amounts, and you can even withdraw a little, which builds trust. Then the system says you must deposit your own money to unlock higher-paying tasks or to release a balance you have supposedly earned. Each deposit leads to another required deposit, with your visible balance climbing on screen. When you finally try to withdraw, new fees, taxes or combination tasks appear, and the money never actually comes out. The scam works because the early small payouts feel like proof that the job is real, and the rising on-screen balance creates a sense of money already owned. The need to deposit more to unlock earnings exploits the wish not to lose what you seem to have built up. Friendly chat handlers and group chats add social pressure and encouragement. People looking for flexible income are targeted most: students, parents at home, jobseekers and newcomers. The FTC and Action Fraud report these task or job scams as one of the fastest-growing forms of fraud, frequently linked to organised networks. A central warning sign is any job where you must pay money in order to earn or to withdraw. Genuine employers do not ask staff to deposit funds. Be wary of unsolicited offers promising high pay for trivial tasks, recruitment only through messaging apps, and pressure to act fast or to recruit others. Other signs include payments and deposits requested in cryptocurrency, balances that exist only inside the platform, and withdrawals that keep being blocked by new fees or rules. Vague company details and contact only through chat are further indicators. Treat any work offer that requires a deposit as a scam and do not pay to access tasks or to release earnings. Be cautious with jobs offered out of the blue by message, and verify a company independently through its official channels rather than links the recruiter sends. Never send cryptocurrency to unlock a balance. If you are already involved, stop depositing immediately, keep screenshots of the app and chats, and contact your bank or crypto exchange about any payments. Report the case to the police and to your national body, such as the FTC or Action Fraud, even if you feel embarrassed, as this helps disrupt the networks. ### Recovery & refund-recovery scams https://scampilot.de/learn/recovery-scam After someone has already been scammed, a second scammer contacts them claiming to be a "fund recovery" expert, lawyer or government agent who can get the lost money or crypto back - for an upfront fee, "tax" or "release" payment. Victims of an earlier scam are deliberately targeted a second time. A recovery scam targets people who have already lost money to fraud. Someone makes contact claiming they can get your lost funds or cryptocurrency back, posing as a recovery agent, a lawyer, a fund manager or even an official body. They sound knowledgeable and sympathetic, and they may already know details of your earlier loss. To start the recovery they ask for an upfront fee, a tax, a deposit or your account access. No money is ever returned; instead you lose a second time, and the scammers may sell your details to others who try again. This scam works because the hope of undoing a painful loss is powerful, and an offer of rescue can feel like a lifeline. Victims are often distressed and may lower their guard with anyone who promises help and speaks the language of authorities or finance. Knowing details of the first scam makes the recovery offer seem credible. The people targeted are specifically those who have already been defrauded, since their contact details circulate on so-called sucker lists shared among criminals. The FBI and Action Fraud warn that a second approach after a loss is itself a strong sign of fraud. The strongest warning sign is being contacted out of the blue by someone offering to recover money you lost, especially if they want payment before any results. Be suspicious of any upfront fee, tax or deposit, of requests for remote access to your computer or accounts, and of guarantees that funds will definitely be returned. Claims to represent a government agency, court or a special crypto recovery service, often with official-looking documents, are common. Real authorities do not charge individuals a fee to recover stolen funds and do not approach victims this way. Treat any unsolicited recovery offer as a likely second scam and do not pay any fee or grant account access. Genuine help with fraud comes through the police, your bank and official consumer bodies, which you can contact yourself rather than through someone who approached you. Verify any agent or firm independently before trusting them. If you have lost money to fraud, report it through official channels such as the police, the FTC, Action Fraud or the Verbraucherzentrale, and be wary of anyone who contacts you afterwards. Keep records of all communications, and remember that being targeted again is not your fault. ### Rental & apartment scams https://scampilot.de/learn/rental-scam A flat is listed well below market price with attractive photos (often stolen from a real listing). The "landlord" is conveniently abroad and cannot show it, so you are asked to pay a deposit and first month before viewing, with the keys promised by mail. After payment there is no flat and no landlord. A rental scam advertises an attractive home at a noticeably low price on a listings site or social media. The supposed landlord explains they are abroad, perhaps for work or family reasons, and so cannot show the flat in person. They ask you to pay a deposit or the first month's rent before any viewing, promising to send the keys by mail once the money arrives. The photos are usually genuine but stolen from a real listing, and the property either is not for rent or does not belong to the contact. After payment the keys never come and the landlord disappears. The scam works because tight housing markets make a good, affordable flat feel like a rare chance worth grabbing quickly. The fear that someone else will take it pushes people to pay before they have seen anything. A plausible reason for the landlord's absence and professional-looking photos make the story believable. Those searching hardest are most at risk: students, newcomers to a city, people relocating for work and anyone under time pressure to move. The Verbraucherzentrale notes that scammers often copy real adverts and lure tenants away from official platforms into private messaging. Key warning signs are a rent clearly below the local market, a landlord who is conveniently abroad and cannot show the flat, and a demand for money before any viewing or signed contract. Requests to pay by instant transfer, money transfer service or cryptocurrency, or via a third-party escrow the landlord names, are further red flags. Be cautious if you are pushed to move off the platform into private email or chat, if the same photos appear in other listings, or if the contact answers questions only vaguely. A refusal to meet or to let a local contact view the property is a strong sign of fraud. Never pay a deposit or rent before you or a trusted person has viewed the property and seen identification and a proper contract. Be sceptical of any landlord who only communicates from abroad, and do a reverse image search on the photos to check whether they appear elsewhere. Keep all dealings on the official platform and use traceable payment methods. If you have already paid, contact your bank or transfer service at once to try to stop or reverse the payment, and gather all messages and listing details. Report the scam to the police and to the platform so the advert can be removed, and to the Verbraucherzentrale if you are in Germany. ### Bank fraud-department impersonation https://scampilot.de/learn/bank-impersonation A caller or text claims to be your bank's fraud department: there is a suspicious transaction and, to "protect" you, you must move your money to a new "safe account" or read out a one-time code or TAN to cancel the payment. The safe account belongs to the scammer, and the code authorises their transfer. In a bank impersonation scam, a caller or text message claims to be from your bank's fraud or security department. They say suspicious activity or a fraudulent transaction has been spotted on your account and that they are calling to protect your money. The caller ID or sender name may be faked to match your real bank. To stop the supposed fraud they tell you to move your money to a new safe account, or to read out a one-time code, TAN or password so they can cancel a transaction. In reality this lets them take your money or approve their own transfers. The scam works because the caller appears to be on your side, warning you about fraud rather than asking for a favour. That framing lowers suspicion, while urgency and the fear of losing your savings push you to act before you think. A spoofed number that matches your bank makes the call feel verified. Anyone with a bank account can be targeted, and scammers often have some real details about you from data leaks, which makes them sound legitimate. Action Fraud and the BSI both stress that no genuine bank ever asks you to move money to a safe account or to share a one-time code. The clearest warning sign is any request to move money to a safe or holding account, or to read out a one-time code, TAN, PIN or password. No real bank needs these from you, because it can stop fraud from its own side. Pressure to act immediately and instructions to keep the call secret are also red flags. Be suspicious of calls or texts that ask you to confirm a payment you did not make by sharing a code, or that send a link to log in. A matching caller ID or bank name proves nothing, since both can be spoofed. If you get such a call or message, do not act on it. Hang up, wait a moment, and call your bank back on the number printed on your card or statement to check. Never move money to a new account on someone's instruction over the phone and never share a one-time code, TAN, PIN or password with anyone, including a caller who claims to be your bank. If you have already shared a code or transferred money, contact your bank immediately on its official number to freeze the account and try to recall the payment, then report it to the police. In the UK report to Action Fraud, and in Germany to the police and the BSI; acting fast gives the best chance of recovering funds. ### Paid Review Schemes (Gift Card for a 5-Star Review) https://scampilot.de/learn/amazon-review A seller, or a middleman acting for several sellers, contacts you after a purchase and offers a refund, a gift card, or a free product in exchange for a glowing five-star review. Sometimes they ask you to buy the item first and promise to pay you back once the review is live. The deal feels like easy money, but it breaks marketplace rules and consumer-protection law, can get your buyer account permanently banned, and often ends with the promised refund never arriving once your honest review has been replaced by a fake one. After you buy something, a message arrives by email, a card slipped into the package, or a chat on a messaging app. The sender thanks you for your order and offers money or a gift card if you post a five-star review and confirm it with a screenshot. In the most common version you are asked to pay full price first so the purchase counts as verified, then submit your review, and only afterwards are you promised a refund through PayPal or a gift-card code. The refund is the bait that keeps you compliant. The offer feels harmless and even generous: you get paid for an opinion you might have shared anyway. Sellers target recent buyers and people who already leave a lot of reviews, because their feedback looks credible to the platform and to other shoppers. The scheme works because most people do not realise that accepting it makes them part of the fraud. Honest shoppers reading those fake five-star reviews are the real victims, and the platform treats reviewers who take payment as rule-breakers, not as bystanders. Any contact that links a review to a payment, refund, gift card, or free product is the core warning sign - genuine sellers may ask you to review, but never pay for the rating itself. Be wary when you are pushed to communicate off-platform, by email or a messaging app, where the marketplace cannot see the deal. Requests for a screenshot of your posted review, a five-star rating specifically, or a particular wording are all signs of manipulation rather than honest feedback collection. Do not accept the offer and do not change or post a review in exchange for anything. Keep the message and report it to the marketplace through its official seller-feedback or report channel so they can act on the seller. Only ever write reviews that reflect your real experience, and ignore inserts or follow-up emails that promise rewards. If you have already taken part, you can edit or delete the affected review and report yourself to the platform - coming forward is treated far more leniently than being caught. ### Brushing Scam (Parcels You Never Ordered) https://scampilot.de/learn/brushing Brushing is when a seller sends you cheap goods you never ordered so they can register a sale to your name and address and then post a glowing "verified purchase" review in your name. The package itself is usually harmless and free to keep, but it is a signal that your name and address - and possibly more of your personal data - are circulating where a stranger can use them. The real harm is the fake reviews that mislead other shoppers and the fact that someone has enough of your details to set up the shipment. A seller wants more positive reviews than honest customers will give them. They create order records using real names and addresses they have bought or scraped, then ship a cheap, lightweight item to each one so the purchase shows as completed and shipped. With a delivery on record, the platform counts any review they post under your name as a verified purchase. You receive an unexpected parcel with no invoice and no clear sender, and somewhere online a five-star review now carries your name. Anyone whose name and address have leaked in a data breach or been sold on can become a target, so it is rarely something you did wrong. The scam works because a free gift feels like good luck rather than a warning, and because the cost of shipping a cheap item is tiny compared with the value of fake credibility. The people genuinely harmed are other shoppers who trust the inflated ratings, and you indirectly, because the same leaked data can be reused for other fraud later. The clearest sign is a parcel you genuinely did not order arriving with no invoice, no gift note, and often no readable sender. The contents tend to be low-value and random: phone cases, seeds, small gadgets, costume jewellery. Be especially cautious if the package includes a QR code or a slip inviting you to scan it to find out who sent it. That code can lead to a phishing site, so the harmless parcel can be a doorway to a second, data-stealing stage. You are allowed to keep an unsolicited item and are under no obligation to pay or return it - never pay any fee demanded for it. Do not scan any QR code in the box; instead check whether reviews have been posted under your name and report them to the marketplace. Change the password of the shopping account linked to your address, turn on two-factor login, and watch your accounts for any orders you did not place. If goods keep arriving, report it to the retailer and to consumer protection. ### Calendar Invite Phishing (Spam Events on Your Calendar) https://scampilot.de/learn/calendar-invite Scammers send calendar invitations that some apps add to your calendar automatically, even before you open them. The events carry alarming titles and a link - a fake invoice, a security warning, a parcel notice - that leads to a phishing or malware page. Because the entry appears inside a trusted calendar with a notification, it looks like something you agreed to, which is exactly why people tap the link without the usual caution they apply to email. The attacker emails a standard calendar invitation to your address. On many phones and webmail setups the default is to add invitations to your calendar automatically, so the event appears and a reminder pops up without you ever accepting anything. The event title and notes contain urgent text and a link. When you tap it - often from a lock-screen reminder - you land on a page that imitates a bank, parcel service, or login screen and asks for your details or installs something. A calendar feels like your own private space, so an entry there carries an authority that a random email does not. The reminder arrives at an unexpected moment and creates a small jolt of urgency that pushes people to act before they think. This is sent in bulk to any leaked email address, but it lands hardest with people who live by their calendar and with those less familiar with how invitations can be auto-added. No prior contact with the sender is needed. An event you have no memory of creating, from a sender you do not recognise, is the first sign. The wording is typically urgent and threatening - an account closing today, a payment to confirm, a parcel held - paired with a single link. Look at who organised the event and where the link actually points: mismatched or random domains, odd sender addresses, and generic greetings all mark it as fake rather than a real appointment. Do not tap any link in an unexpected calendar event. Delete the event, and where the option exists choose to report it as spam or junk rather than simply declining, since declining can confirm your address is active. In your calendar settings, turn off automatic adding of invitations so new events only appear after you accept them from email. If a message claims to be from your bank or a delivery firm, check by opening their official app or site directly instead. ### Vehicle Sale Scams (Too-Cheap Cars and Fake Escrow) https://scampilot.de/learn/car-sales In a vehicle-sale scam a car, van, or motorbike is listed well below market price with a plausible story - a soldier deploying overseas, a death in the family, an urgent move. The seller refuses a normal viewing and steers you toward paying through a fake escrow service, a wire transfer, or gift cards, often dressed up as a buyer-protection programme. The car does not exist or is not theirs, and once the money is sent it is gone, along with the seller. A listing shows a desirable vehicle at a price low enough to attract fast interest but not absurd enough to scare people off. When you ask to see it, the seller explains they have already moved away, are deployed with the military, or are too unwell, so an in-person viewing is impossible. They then propose a safe-sounding process: an escrow service or a buyer-protection programme that will hold your money until the car arrives. The site is fake, controlled by the scammer, and the moment you pay by transfer or gift card the money is irretrievable. A bargain on a big-ticket item is hard to resist, and the seller's story turns the missing viewing into something sympathetic rather than suspicious. The fake escrow page borrows the language of buyer protection, so handing over money there feels safer than paying directly. Buyers hunting for an affordable car, people new to private vehicle sales, and anyone shopping under time pressure are most exposed. A related twist targets sellers too, through buyers who overpay and ask for the difference back. A price clearly below comparable vehicles, combined with a seller who cannot meet you or let you inspect the car, is the strongest warning. Stories of overseas deployment, sudden relocation, or bereavement are recurring scripts used to justify the distance. Any push toward an escrow link they provide, a wire transfer, gift cards, or buying a paid "VIN report" from a specific site is a sign of fraud. Real private sales let you see the vehicle and pay through normal, traceable means. Never pay for a vehicle you have not seen in person, and never use an escrow site the seller sends you - if escrow is genuinely needed, choose the provider yourself and verify it independently. Insist on inspecting the car and checking the documents and identity against the registered owner. Pay by a method that offers some recourse, not by wire or gift card, and walk away from anyone who rushes you with deposits to "hold" the car. Buy any history or VIN report only from a well-known, official provider you found yourself. ### Reshipping Job Scam (Becoming an Unwitting Parcel Mule) https://scampilot.de/learn/parcel-mule A reshipping scam is a fake work-from-home job where you receive packages at your address and forward them on to another address, often abroad, using prepaid labels the "employer" sends you. The goods were bought with stolen cards or stolen accounts, and by relabelling and reshipping them you launder them for the criminals. Wages are usually promised after a 30-day "trial" that conveniently ends before you are paid, leaving you out of pocket and, more seriously, potentially liable for handling stolen property. You are recruited through a job advert, a recruiter message, or a hiring email for a role with titles like "package processing agent" or "quality control shipping coordinator". The job sounds simple: receive parcels, check them, repackage them, and send them on with labels the company provides. The parcels contain goods - phones, electronics, clothing - bought with stolen payment details. By forwarding them, usually overseas, you break the trail between the criminal and the merchandise. You are the visible local address that takes the risk while the organisers stay hidden. The offer targets people looking for flexible, work-from-home income: students, carers, the recently unemployed, and newcomers to a country. It is dressed in professional language with contracts, dashboards, and an onboarding process that make it feel like a real company. It works because nothing seems to leave your bank account - you are receiving and sending, not paying - so the risk is hidden. The cost lands later, when the promised salary never comes and when banks, couriers, or police trace the stolen goods back to your name and address. Any job whose core task is receiving parcels and reshipping them, especially to addresses abroad, should be treated as a reshipping scam. Watch for prepaid labels sent to you, instructions to remove or replace existing labels and invoices, and pressure to forward items quickly. Payment held back until after a trial period, a salary that depends on processing a quota of packages, and a company you cannot verify with a real registration or address are all strong signs. Legitimate logistics employers do not run operations out of your home letterbox. Do not take any job built around receiving and forwarding parcels, and do not reship packages for an employer you cannot fully verify. Check the company name against an official business register and search for the role wording, which often appears word for word in scam warnings. If you have already started, stop reshipping immediately and do not send on any parcel you still hold. Keep all packages, labels, and messages, and report it to the police and to the courier - cooperating early protects you if the stolen goods are traced. ### Pet adoption & puppy scams https://scampilot.de/learn/pet-adoption A seller advertises a purebred puppy, kitten or other pet far below the usual price, but always finds a reason not to meet in person. After you pay a deposit, new fees appear - a special shipping crate, pet insurance, a travel permit - and the animal never arrives. The photos are often stolen from real breeders or generated by AI. You find an irresistible listing - an expensive breed offered cheaply, with adorable photos and a warm, personal story. The seller will not video-call or let you visit, claiming they have moved away or that the animal is already with a shipping company. Once you send a deposit, the demands escalate: a refundable crate rental, mandatory pet insurance, a customs or vaccination fee. Each payment is described as the last one, but the pet does not exist and never ships. People shopping for a pet are emotionally invested and excited, which makes it easy to rush past warning signs. Families wanting a specific breed for children, or buyers hoping to save money on a costly animal, are especially drawn in. The scammer mirrors the trust people feel toward animal lovers, and the staggered fees feel small next to the joy of a new companion. By the time doubts set in, several payments have already been made. The clearest sign is a refusal to meet the animal or do a live video call before paying. A price well below market value for a sought-after breed is bait, not a bargain. Watch for fees that only appear after a deposit, and for requests to pay by gift card, cryptocurrency or instant bank transfer. A reverse image search of the photos often reveals the same animal on many other sites. Always insist on seeing the animal in person or on a live video call where the seller follows your instructions, like holding a paw up. Buy from local breeders, recognised shelters or rescue organisations you can verify. Never pay deposits or surprise fees to someone you have not met, and avoid irreversible payment methods. If a deal feels rushed or too good to be true, walk away - there are always other animals needing homes. ### MLM & pyramid recruitment https://scampilot.de/learn/mlm A friend or stranger offers a "business opportunity" where you buy a starter kit, sell products and earn most of your money by recruiting other people. The pitch promises freedom and unlimited income, but monthly quotas and the cost of inventory mean the vast majority of participants lose money. When earnings depend mainly on recruiting, it behaves like a pyramid scheme. You are invited to join a company by buying a starter kit and a stock of products to resell. To stay active and earn bonuses you must hit monthly purchase or sales quotas, which often means buying more than you can sell. The real money is presented as coming from recruiting: every person you sign up brings you a cut of their purchases, and so on down the chain. When income depends on endless recruiting rather than real product sales, the structure mathematically collapses for those who join later. The offer is usually delivered by someone you trust - a friend, a relative or a former classmate - which lowers your guard. It is often aimed at people seeking flexible income: parents at home, students, or anyone between jobs. Success stories, screenshots of big payouts and an upbeat community create pressure to believe and to recruit those close to you. Admitting it is not working can feel like a personal failure, so people keep buying stock and stay longer than they should. A strong focus on recruiting others, rather than selling a product customers actually want, is the central warning sign. Be wary of any required upfront purchase, ongoing monthly quotas or pressure to keep buying inventory. Vague answers about average earnings, or income claims without a clear breakdown of costs, are a bad sign. If the people above you earn mainly from your purchases and your recruits, you are funding the top of a pyramid. Before joining anything, ask for a written income disclosure and a clear list of all costs, then calculate whether you could earn from product sales alone, with no recruiting. Research the company name together with words like complaints or pyramid. Never take on debt or spend savings to buy starter kits or inventory, and do not let urgency or friendship rush you. A genuine business will still be there after you have taken a few days to think it over. ### Government & authority impersonation https://scampilot.de/learn/government-impersonation A caller, email or text pretends to be the tax office, immigration, police or a utility company and claims you owe money or have broken the law. You are threatened with arrest, heavy fines, deportation or having your power cut off unless you pay immediately, usually by gift card, cryptocurrency or instant transfer. Real authorities do not work this way. You receive a sudden, official-sounding contact saying there is a problem: unpaid taxes, a suspended identity number, a deportation order or an overdue utility bill. The message carries an air of authority and often a fake case or reference number to seem legitimate. You are pressured to act within minutes and told not to hang up or talk to anyone. To resolve it, you must pay right now using untraceable methods like gift cards, crypto or instant transfer - the choice of payment is itself the giveaway. Authority and fear are powerful: most people instinctively comply when an official-sounding voice threatens arrest or loss of legal status. The shock leaves little room for calm, logical thought. Scammers often target newcomers, immigrants, older adults and anyone unsure of how a given agency really operates. Caller ID and email addresses can be spoofed to show a genuine-looking number or domain, which makes the threat feel real. No real authority demands payment by gift card, cryptocurrency or instant transfer, and none threatens immediate arrest over the phone. Extreme urgency and an instruction to keep the call secret are clear manipulation tactics. Watch for threats tied to deportation, a suspended identity number or same-day power cut-offs. A genuine agency communicates through official letters and lets you verify and respond at your own pace. Hang up or stop replying, then contact the agency yourself using a phone number or address from their official website - never the contact details given in the message. Take your time; a real matter can always be checked the next day. Never pay with gift cards or crypto, and never share passwords, identity numbers or banking details under pressure. When in doubt, talk to someone you trust before acting, as a second opinion breaks the panic. ### Fake charity & disaster appeals https://scampilot.de/learn/charity Scammers create fake charities or copy real ones, especially after a disaster, and beg for urgent donations. They push you to give right now through gift cards, cryptocurrency or instant transfer, or through a fake crowdfunding page that funnels money to them instead of victims. The emotional appeal is real; the cause is not. Soon after a flood, fire, earthquake or tragedy in the news, you receive an emotional appeal by email, text, social media or phone. It uses real images and a charity name that sounds familiar, sometimes nearly identical to a well-known organisation. You are urged to give immediately while the need is greatest, and steered toward gift cards, crypto or a crowdfunding link. The money goes straight to the scammer, and because these payment methods are hard to trace, it cannot be recovered. Generosity and compassion are exactly what the scam exploits: when people are moved by suffering, they want to help fast and may skip their usual checks. The fresher the disaster, the stronger the urge to act without thinking. Kind-hearted donors, regular charity givers and people with a personal connection to a cause are prime targets. A name that closely mimics a trusted charity makes the request feel safe and familiar. High-pressure urgency - give this second, every moment counts - is a classic manipulation, since real charities welcome a donation whenever it comes. Requests for gift cards, cryptocurrency or wire transfer are a strong warning, as legitimate charities accept normal, traceable payments. Be cautious of vague descriptions of how funds are used, refusal to provide a registration number, and names that are slight variations on famous charities. Unsolicited thank-you messages for donations you never made can also be a setup. Give to charities you choose and look up yourself, by typing their official website address rather than following a link in a message. Check the organisation in an official charity register or seal-of-approval directory before donating. Donate by traceable means such as card or bank transfer, never gift cards or crypto, and never feel rushed - a real cause will still need support tomorrow. If you are unsure, take a moment to verify; thoughtful giving still helps. ### Social media account takeover https://scampilot.de/learn/social-media-takeover An attacker hijacks a social media or messaging account, then uses the trust of its contacts to spread further. A common trick is a "friend" asking you to forward a verification code, vote in a contest, or lend money because they are locked out - in reality the code lets the attacker take over your account next. Once they control it, they target your friends. An attacker who already controls a friend's account messages you, sounding just like them. They ask for a small favour: vote for them in a competition, or confirm a code that was sent to you by mistake. That code is actually the verification or password-reset code for your own account. The moment you forward it, the attacker resets your login, locks you out and starts the same routine on everyone in your contacts. The request comes from a real friend's account, so it feels completely safe - you are not talking to a stranger but to someone you trust. The favour sounds tiny and harmless, which lowers any suspicion. Anyone with an online account is a potential target, but people who are quick to help friends, and those less familiar with how login codes work, are most at risk. The scam scales by turning each new victim into a launchpad for the next. Any request to share a verification code, one-time password or reset code is the brightest red flag - those codes are only ever for you, never for anyone else. Be alert when a contact suddenly needs help getting back into an account, or asks you to vote via a strange link. Messages that create urgency, ask for money, or sound slightly off in tone or wording suggest the account is compromised. A request that arrives only by chat, with the friend unable to take a call, is especially suspicious. Never share a login or verification code with anyone, no matter who appears to be asking. If a friend's message seems off, verify through another channel - call them or message a different way before doing anything. Protect your own accounts with strong, unique passwords and turn on two-factor authentication, ideally with an app rather than text messages. If you receive a code you did not request, treat it as an attempt against you and ignore it. ## Contact - General: hallo@scampilot.de - Privacy / GDPR: datenschutz@scampilot.de - Security disclosures: sicherheit@scampilot.de