The scams tower · the atrium

Phishing and scam calls: the tower, floor by floor

This is the entrance to the scams tower — phishing email, messages that are not from the delivery company, calls from people who already know your name. If money has already left your account, skip the atrium and go to the last wing now, because the first hour is the one that matters.

Every floor above rests on the same observation. None of this is technical. Nothing is broken into and no password is cracked: you are asked, convincingly and in a hurry, to do something you would never do with time to think. That is why the tower is organised as a catalogue of the asks rather than a list of tools. Recognising the shape of the request is faster and more reliable than inspecting the details of it, and it works on the version that arrives next year in a form nobody has seen yet.

It is also why nothing here shames anybody. The scripts on these floors are refined against millions of people and they work on careful, intelligent, well-informed adults every day of the week. Anyone who believes they could not be caught is simply describing which script has not been written for them yet.

Three levels, and you are on the first. The atrium lists the floors; a floor covers one kind of attack completely and holds the shorter guides beneath it. Nothing is more than three clicks from the front door, and every floor returns here.

One habit is worth taking upstairs, because every floor eventually arrives at it. Whenever a message or a call asks you to act immediately, the correct response is not to decide whether it is genuine. It is to leave the conversation entirely and reach the organisation by a route you chose yourself: the number printed on your card, the app you already have, the address you typed by hand. A real bank, a real courier and a real tax office all survive that perfectly well. Nothing on these floors does.

Where to start

Five ways in. The first three are for right now; the last two are for afterwards.

“I just clicked a link in a message.”
Go straight to after it happened
“I sent money and I think it was a scam.”
The first hour matters — go to after it happened
“Is this message real or not?”
Find the channel it arrived by in by channel
“Who keeps calling me from this number?”
That is checking a number
“My father is being told to buy gift cards.”
Read the story floors in by story

By channel

The same trick arrives through different doors, and each door has its own tells. These floors are about what to look at first — which is almost never the thing the message wants you to look at.

Phishing emailWhat to check first, and why the sender’s display name is worth nothing at all.Being built
Text messagesParcels, tolls and banks, and the link that is one character away from the real address.Being built
Phone callsThe caller who already knows your details, and the callback rule that ends every one of them.Being built
Social media messagesWhen it genuinely comes from a friend, because their account was taken first.Being built
QR codesThe sticker placed over the real one, and how to see where a code actually goes.Being built

By story

The scripts themselves. There are fewer than people expect, they barely change from year to year, and knowing the shape of one is what buys you the two seconds it cannot survive.

Your account is at riskThe most-used opening line in the world, and the precise reason it works on careful people.Being built
Tech supportThe call about a virus you do not have, and what remote access hands over.Being built
Investment and cryptoGuaranteed returns, screenshots of profits, and the withdrawal that suddenly needs a fee.Being built
RomanceThe romance scam: months of patience, one emergency, and why money is never the first ask.Being built
Job offersThe role that pays unusually well and asks you either for a fee or to move somebody’s money.Being built
Delivery and toll feesA tiny amount said to be owed, and why the amount is kept deliberately small.Being built
SextortionThe threat that almost always has nothing behind it, and what to do anyway.Being built
Gift cards and vouchersThe single clearest signal in existence that a request is a scam, whoever appears to be asking.Being built

Checking a number

What you can genuinely find out about who called — and what the lookup sites themselves are doing with the number you type into them, which is a question people rarely ask.

Unknown numbersWhether to call back at all, and what a single missed ring from abroad is trying to achieve.Being built
Phone number lookupWhat these services can actually tell you, and what they collect while telling you it.Being built
Spoofed caller IDWhy your bank’s real number appearing on your screen proves absolutely nothing.Being built
Blocking and filteringWhat your phone and your network already do for free, before you install anything.Being built

After it happened

The hours that decide how much of this is recoverable, and where to report it so that the report actually goes somewhere. Written to be read while shaking.

If you clickedWhat to change, from which device, and in what order — most of the time this ends well.Being built
If you paidCard, bank transfer or crypto: what can still be stopped, by whom, and how fast you must move.Being built
If you gave a codeThe six digits that hand over an account, and what to do in the next ten minutes.Being built
Where to report itThe official body for your country, and why reporting is not the pointless exercise it feels like.Being built
Helping an older relativeThe conversation that works, and the one that guarantees they hide it from you next time.Being built

What this tower will not do

It will not sell you protection. There is a large industry offering subscriptions that promise to stop this, and almost nothing on these floors requires a product. What it requires is a rule you decided in advance — hang up and call the number on the back of your own card — and rules are free.

It will not publish a list of scam numbers. Numbers are spoofed and rotated constantly, such a list is out of date the day it is written, and treating an absent number as a safe one is exactly the mistake these floors exist to prevent.

And it will not tell anybody they were stupid. That word is why most of this goes unreported, why families find out months later, and why the same script keeps working. Every floor here is written to be forwarded to somebody who is in the middle of it, which rules out a certain tone entirely. What holds instead is simple: written to be forwarded to somebody who is about to pay, and never carrying an affiliate link.

Written by Alberto Gulotta

Founder and editor of AI Tools Primer, writing from Palermo, Italy. Thirty-five years of taking computers apart, starting with a Commodore 64 — the long version is on the about page.

Something wrong on this page? Write to aitoolsprimer@gmail.com and it gets fixed.

Independence and limits

No affiliate links and no paid placements anywhere on this site. Nobody pays to appear here, and no company has seen this page before you did.

This is general information, not professional advice. Where a page touches money, health, safety or the law, it names its source and the date it was read — and your situation may still differ. See the privacy page and the cookie policy.