Cyber for Normies

Glossary

Scam glossary: plain-English meanings of scam words

The short answer

Scam words, explained simply. Each one links to the official source it comes from, and to a page here if we have one.

7726 (SPAM)

The number you can forward scam texts to, to report them (FTC).

Read more about 7726 (SPAM)

Credit freeze

A free lock on your credit report so nobody can open new credit in your name until you lift it (FTC).

Read more about credit freeze

Fraud alert

A free note on your credit report telling businesses to check with you before opening new credit (FTC).

Read more about fraud alert

Grandparent scam

A caller claims a family member is in jail or trouble and needs money fast (FCC).

Read more about grandparent scam

Impostor scam

Someone pretends to be a person or organization you trust to get money or information (FCC).

Malware

Harmful software that can get onto your device from links, downloads, or attachments (FTC).

Read more about malware

Master password

The one main password that opens your password manager. Make it long and use it nowhere else (CISA, NCSC).

Read more about master password

Neighbor spoofing

Spoofing a number that starts with the same digits as yours, so the call looks local (FCC).

One-ring scam (wangiri)

Your phone rings once, often late at night, from a number that looks domestic but is foreign. Calling back can cost you international fees (FCC).

Passkey

A way to sign in without a password, using your device’s fingerprint, face, or passcode. NCSC recommends using them where offered (NCSC).

Password manager

An app that creates, stores, and fills in your passwords, so you only remember one (CISA).

Read more about password manager

Phishing

Sounds like "fishing." A message or website that pretends to be a company you trust, to get your personal information (CISA).

Read more about phishing

Pig butchering

A long con where a scammer builds a friendship or romance online, then talks you into a fake cryptocurrency investment (FinCEN, SEC).

Porting scam (SIM swap)

A scammer pretends to be you and has your phone number moved to their device, then uses it to get into your accounts (FCC).

Recovery scam

After you’ve lost money to a scam, someone offers to get it back for a fee. It’s another scam (FCC, FTC).

Read more about recovery scam

Smishing

Phishing by text message. Short for "SMS phishing" (FCC).

Read more about smishing

Social engineering

Tricking people, not computers. A scammer uses human interaction to get information (CISA).

Spoofing

Faking what shows up on your caller ID so you’re more likely to answer. Scammers often spoof local numbers, companies, and government agencies (FCC, FCC).

Task scam

A fake job doing simple online tasks for fake commissions, until you’re told to deposit your own money (FTC).

Read more about task scam

Tech support scam

A fake warning or call about a computer problem, meant to get you to pay for fake help or give remote access (FTC).

Read more about tech support scam

Two-factor authentication (2FA, MFA)

A second step after your password, like a code or fingerprint, so a stolen password isn’t enough (CISA).

Read more about two-factor authentication

Verification code

A short code a company sends to prove it’s you. Anyone asking you to read it back is likely a scammer (FTC).

Read more about verification code

Vishing

Phishing by voice, meaning phone calls or voicemails (CISA).

Read more about vishing

Sources

  1. How to Recognize and Report Spam Text Messages (FTC)
  2. Credit Freezes and Fraud Alerts (FTC)
  3. Scam Glossary (FCC)
  4. Malware: How To Protect Against, Detect, and Remove It (FTC)
  5. Use Strong Passwords (CISA)
  6. Password managers: how they help you secure passwords (NCSC (UK))
  7. Avoiding Social Engineering and Phishing Attacks (CISA)
  8. FinCEN Alert on Prevalent Virtual Currency Investment Fraud Schemes Commonly Known as "Pig Butchering" (FIN-2023-Alert005) (FinCEN)
  9. Relationship Investment Scams: Investor Alert (SEC Investor.gov)
  10. Refund and Recovery Scams (FTC)
  11. Caller ID Spoofing (FCC)
  12. How to spot and avoid task scams (FTC)
  13. How To Spot, Avoid, and Report Tech Support Scams (FTC)
  14. Turn On MFA (CISA)
  15. What's a verification code and why would someone ask me for it? (FTC)

Get one plain-English scam warning every Tuesday

Cyber for Normies is a free weekly email for people who don’t work in tech. Short, calm, and easy to forward to the people you look out for.

Join free and get 7 Ways to Spot an Internet Scam, a cheat sheet worth keeping by the phone.
Free. One email every Tuesday. Unsubscribe anytime. Privacy