Glossary
Scam glossary: plain-English meanings of scam words
The short answer
Scam words, explained simply. Each one links to the official source it comes from, and to a page here if we have one.
7726 (SPAM)
The number you can forward scam texts to, to report them (FTC).
Credit freeze
A free lock on your credit report so nobody can open new credit in your name until you lift it (FTC).
Fraud alert
A free note on your credit report telling businesses to check with you before opening new credit (FTC).
Grandparent scam
A caller claims a family member is in jail or trouble and needs money fast (FCC).
Impostor scam
Someone pretends to be a person or organization you trust to get money or information (FCC).
Malware
Harmful software that can get onto your device from links, downloads, or attachments (FTC).
Master password
The one main password that opens your password manager. Make it long and use it nowhere else (CISA, NCSC).
Neighbor spoofing
Spoofing a number that starts with the same digits as yours, so the call looks local (FCC).
One-ring scam (wangiri)
Your phone rings once, often late at night, from a number that looks domestic but is foreign. Calling back can cost you international fees (FCC).
Passkey
A way to sign in without a password, using your device’s fingerprint, face, or passcode. NCSC recommends using them where offered (NCSC).
Password manager
An app that creates, stores, and fills in your passwords, so you only remember one (CISA).
Phishing
Sounds like "fishing." A message or website that pretends to be a company you trust, to get your personal information (CISA).
Pig butchering
A long con where a scammer builds a friendship or romance online, then talks you into a fake cryptocurrency investment (FinCEN, SEC).
Porting scam (SIM swap)
A scammer pretends to be you and has your phone number moved to their device, then uses it to get into your accounts (FCC).
Recovery scam
After you’ve lost money to a scam, someone offers to get it back for a fee. It’s another scam (FCC, FTC).
Smishing
Phishing by text message. Short for "SMS phishing" (FCC).
Spoofing
Faking what shows up on your caller ID so you’re more likely to answer. Scammers often spoof local numbers, companies, and government agencies (FCC, FCC).
Task scam
A fake job doing simple online tasks for fake commissions, until you’re told to deposit your own money (FTC).
Tech support scam
A fake warning or call about a computer problem, meant to get you to pay for fake help or give remote access (FTC).
Two-factor authentication (2FA, MFA)
A second step after your password, like a code or fingerprint, so a stolen password isn’t enough (CISA).
Verification code
A short code a company sends to prove it’s you. Anyone asking you to read it back is likely a scammer (FTC).
Vishing
Phishing by voice, meaning phone calls or voicemails (CISA).
Sources
- How to Recognize and Report Spam Text Messages (FTC)
- Credit Freezes and Fraud Alerts (FTC)
- Scam Glossary (FCC)
- Malware: How To Protect Against, Detect, and Remove It (FTC)
- Use Strong Passwords (CISA)
- Password managers: how they help you secure passwords (NCSC (UK))
- Avoiding Social Engineering and Phishing Attacks (CISA)
- FinCEN Alert on Prevalent Virtual Currency Investment Fraud Schemes Commonly Known as "Pig Butchering" (FIN-2023-Alert005) (FinCEN)
- Relationship Investment Scams: Investor Alert (SEC Investor.gov)
- Refund and Recovery Scams (FTC)
- Caller ID Spoofing (FCC)
- How to spot and avoid task scams (FTC)
- How To Spot, Avoid, and Report Tech Support Scams (FTC)
- Turn On MFA (CISA)
- What's a verification code and why would someone ask me for it? (FTC)
Get one plain-English scam warning every Tuesday
Cyber for Normies is a free weekly email for people who don’t work in tech. Short, calm, and easy to forward to the people you look out for.
Join free and get 7 Ways to Spot an Internet Scam, a cheat sheet worth keeping by the phone.
Free. One email every Tuesday. Unsubscribe anytime. Privacy
Social engineering
Tricking people, not computers. A scammer uses human interaction to get information (CISA).