ES
Q1. $250 lands in your Apple Cash from a number you don’t know. A minute later: "So sorry, I sent that to the wrong person. Could you send it back? It’s my rent money." What do you do?
A) Send it straight back. It’s the honest thing to do.
B) Send it back, but as a gift card like they ask.
C) Don’t send anything. Reject or leave the payment, and contact Apple Cash support.
D) Spend it. Their mistake, not yours.
Correct answer: C) Don’t send anything. Reject or leave the payment, and contact Apple Cash support.
Why: The payment could be part of a scam involving stolen funds. Sending the money back yourself could leave you out of pocket if the original payment is reversed. Let Apple Cash support handle it.
Q2. A recruiter messages you about a well-paid remote job. They want to move the chat to Telegram and ask for $80 for a "background check" before your interview. What’s your move?
A) Pay it. Background checks are normal.
B) Find the job on the company’s own careers page, and stop replying to the recruiter.
C) Move to Telegram, but refuse to pay.
D) Send a photo of your ID instead of the fee.
Correct answer: B) Find the job on the company’s own careers page, and stop replying to the recruiter.
Why: Asking for an upfront fee before an interview is a major red flag. Scammers often use fake job offers to steal money or personal information. Verify the vacancy through the company’s official website before proceeding.
Q1 · A caller says they're a Medicare enrollment helper. They know your name and address, and can get you a cheaper plan with a free walker thrown in. They just need you to read out your Medicare number to "verify" you. What do you do?
A) Read it out — they already know your name and address, so they must be legitimate
B) Give them only the last four digits to be safe
C) Hang up, then make any plan changes yourself through Medicare.gov or 1-800-MEDICARE
D) Pay the small sign-up fee they mention so the free gift ships faster
Correct answer: C) Hang up, then make any plan changes yourself through Medicare.gov or 1-800-MEDICARE
Why: Scammers may pose as Medicare helpers to steal your Medicare number. Contact Medicare directly to verify offers and make plan changes.
Q2 · A caller warns that your bank account has been hacked. They tell you to call the number on the back of your bank card — but they don't hang up, and say they'll "transfer" you to a secure line. What should you do?
A) Stay on the line — they're connecting you to the bank's official number, so it's safe
B) End the call completely, then ring the number on your card from a different phone
C) Move your savings to the "safe account" they suggest while the bank investigates
D) Read them the one-time code your bank just texted you so they can lock the account
Correct answer: B) End the call completely, then ring the number on your card from a different phone
Why: Scammers can keep a phone line connected while pretending to transfer you to your bank. Hang up completely and never share verification codes or move money to a “safe account.”
Q1 · A site has a ScamAdviser trust score of 78 out of 100. You're about to buy something. Does that score mean it's safe?
A) Yes — anything above 70 is trustworthy
B) Not necessarily — a higher score means lower risk indicators, but you should still check reviews, contact details, and return policies before paying
C) Yes — ScamAdviser guarantees sites with scores above 50
D) Only if the site also has a padlock in the address bar
Correct answer: B) Not necessarily — a higher score means lower risk indicators, but you should still check reviews, contact details, and return policies before paying
Why: A ScamAdviser Trust Score is an indicator of risk, not a guarantee that a website is safe. A higher score is generally a positive sign, but other factors should still be checked before making a purchase.
Q2 · You receive a cheque in the post from "State Farm" saying you're owed a dividend payment. It looks official and comes with a letter explaining the amount. What should you do before cashing it?
A) Cash it straight away — cheques in the post are always legitimate
B) Call State Farm directly using the number on their official website — not any number printed on the letter — to verify the payment
C) Deposit it and wait to see if it clears
D) Sign and return the enclosed form first to confirm receipt
Correct answer: B) Call State Farm directly using the number on their official website — not any number printed on the letter — to verify the payment
Why: Fake cheque scams often use convincing letters and real company names. Contacting the company through independently verified contact details helps confirm whether the payment is genuine before you deposit or cash the cheque.
Q1 · You find a site offering the iPhone 18 Pro at 30% off retail with "limited pre-order slots." The site looks professional, has reviews, and accepts Apple Pay. What should you check before paying?
A) Whether the discount is bigger than what Apple normally offers
B) The domain age and whether the site appears on ScamAdviser, new domains registered around a product launch are a major red flag
C) Whether the page loads quickly
D) Whether it has a padlock in the address bar
Correct answer: B) The domain age and whether the site appears on ScamAdviser. A newly registered domain around a major product launch can be a major red flag.
Why: A professional looking website, reviews, Apple Pay, and a big discount do not automatically make a store legitimate. Checking when the domain was registered and whether it has a ScamAdviser profile can help you spot warning signs before paying.
Q2 · Your bank calls to say your account has been compromised. They say the safest move is to transfer your funds to a "secure holding account" they have set up for you while they investigate. What is actually happening?
A) A standard fraud protection procedure all banks follow
B) An Authorised Push Payment scam — the "secure account" belongs to the scammer, not your bank
C) A temporary freeze while your bank verifies your identity
D) A legitimate request if the caller ID shows your bank's number
Correct answer: B) An Authorised Push Payment (APP) scam where the “secure holding account” actually belongs to the scammer
Why: Your bank will not ask you to move your money to another account to keep it safe. Scammers often impersonate bank staff and use urgent warnings about compromised accounts to pressure you into transferring your money. Even if the caller ID looks genuine, verify the request by contacting your bank through an official channel.
Q1 · You get a WhatsApp message from an unknown number: "Hi, sorry to bother you — I think I have the wrong number, but since we're talking, I work in crypto investments and have a great opportunity if you're interested." What is this?
A) A genuine cold outreach from a financial advisor
B) A "wrong number" scam designed to open a conversation and steer it toward a fake investment platform
C) Spam that will stop if you ignore it
D) A test from your phone provider
Correct answer: B) A “wrong number” scam designed to open a conversation and steer it toward a fake investment platform
Why: Scammers often pretend they have contacted the wrong person to start a harmless-looking conversation. Once you respond, they may build trust and eventually introduce a supposedly lucrative crypto investment opportunity, often directing you to a fake platform designed to steal your money or personal information.
Q2 · You find a well-written job posting on Indeed for a remote data entry role at a recognisable company name. The pay is above average, the description is detailed, and they ask you to apply via WhatsApp instead of the site. What does that signal?
A) The company prefers a faster hiring process
B) A strong sign the posting is fake — legitimate employers do not route job applications through personal messaging apps
C) A sign the role is highly competitive and they want quick responders
D) Normal for remote-first companies
Correct answer: B) A strong sign the posting is fake — legitimate employers do not route job applications through personal messaging apps
Why: Moving the conversation from a legitimate job platform to WhatsApp is a major red flag, especially when combined with unusually high pay. Scammers use recognizable company names and convincing job descriptions to make fake vacancies look legitimate, then use WhatsApp to request personal information, payments, or other sensitive details.
Q1 · You are about to check in for a flight and get a text: "Your booking requires urgent confirmation. Click here or your seat will be released in 30 minutes." The link leads to a page that looks exactly like the airline's site. What do you do?
A) Click and confirm — you cannot afford to lose your seat
B) Do not click — open the airline's official app or website separately and check your booking there
C) Reply to the text asking for more details
D) Forward the link to someone else to check
Correct Answer: B) Do not click, open the airline's official app or website separately and check your booking there.
Why: The message uses urgency and fear of losing your seat to pressure you into clicking. Even if the website looks identical to the airline's real site, it could be a phishing page designed to steal your login, payment details, or personal information. The safest move is to access the airline through its official app or a website you type in yourself and check whether there is actually a problem.
Q2 · Someone you met online two months ago has been warm, attentive, and consistent. They now mention a "once in a lifetime" crypto investment and offer to walk you through it personally. What is the clearest red flag here?
A) They met you online rather than in person
B) Building trust over weeks then steering the relationship toward a financial opportunity is the exact playbook of a romance investment scam
C) They are talking about crypto, which is inherently risky
D) They offered to help you personally rather than sending a link
Correct Answer: B) Building trust over weeks then steering the relationship toward a financial opportunity is the exact playbook of a romance investment scam.
Why: Romance investment scams often start with weeks or months of attention and emotional bonding before the scammer introduces an investment opportunity. The "once in a lifetime" pitch and personal guidance are designed to make the victim trust the investment rather than question it.
Q1 · You get a WhatsApp message from an unknown number: "Hey! We met at Sarah's last summer — hosting a rooftop thing this Saturday, hope you can make it!" with a link to "confirm your spot." You vaguely remember a Sarah. What do you do?
A) Click the link — it sounds like someone you might know
B) Do not click; ask the sender to confirm who they are before touching any link
C) Click just to see what the page looks like, then close it
D) Reply "Who is this?" and wait
Correct Answer: B) Do not click; ask the sender to confirm who they are before touching any link.
Why: This is a classic example of a "wrong number" or social engineering scam. The scammer tries to sound familiar ("Sarah's last summer") so you'll lower your guard and click the link.
Q2 · A friend tells you they use a VPN so they never land on scam websites. What is wrong with that assumption?
A) Nothing — VPNs block all malicious traffic
B) VPNs hide your IP and encrypt traffic but do not block phishing pages or fake stores — you can still land on and be fooled by scam sites
C) VPNs only work on desktop, not mobile
D) VPNs slow your connection too much to be useful for browsing
Correct Answer: B) VPNs hide your IP and encrypt traffic but do not block phishing pages or fake stores — you can still land on and be fooled by scam sites.
Why: A VPN's main job is to encrypt your internet traffic and hide your IP address, making it harder for others to monitor your online activity. However, it doesn't determine whether a website is legitimate. If you click a phishing link or visit a fake online store, a VPN won't stop you from seeing the site or prevent you from entering your personal information.
Q1. Recibes una llamada desde el número exacto de tu banco. La persona que llama conoce tu nombre, los 4 últimos dígitos de tu tarjeta y dice que hay actividad sospechosa en tu cuenta. Te piden que confirmes el número completo de tu tarjeta para "congelar la transacción". ¿Qué debes hacer?
A) Confirmar el número de tarjeta: ya lo saben todo.
B) Cuelga y vuelve a llamar a tu banco al número que aparece en el reverso de la tarjeta.
C) Pídeles que te envíen los datos por correo electrónico
D) Dar sólo los 4 primeros dígitos para comprobar si son reales.
Respuesta: B) Cuelga y vuelve a llamar a tu banco utilizando el número que figura en el reverso de tu tarjeta.
Por qué: los números de teléfono pueden ser falsos y los estafadores suelen disponer ya de información parcial procedente de filtraciones de datos. Un banco de verdad nunca le presionará para que revele el número completo de su tarjeta en una llamada inesperada. Compruébalo siempre llamando tú mismo al número oficial.
Q2. Entras en un sitio web y aparece un cuadro CAPTCHA que te pide que pulses la tecla de Windows + R, pegues un código y pulses Intro para "verificar que eres humano". Parece una comprobación de seguridad normal. ¿Qué es lo que ocurre?
A) Una función legítima de accesibilidad para usuarios de teclado
B) Un CAPTCHA falso diseñado para ejecutar malware en tu dispositivo - cierra la página inmediatamente
C) Un aviso estándar de actualización de seguridad de Windows
D) Una comprobación de compatibilidad del navegador - continuar con seguridad
Respuesta: B) Un CAPTCHA falso diseñado para ejecutar malware en su dispositivo - cierre la página inmediatamente.
Por qué: Las pruebas CAPTCHA reales nunca le piden que abra el comando Ejecutar ni que pegue código en su ordenador. Este truco se utiliza para instalar malware, robar contraseñas o dar a los estafadores acceso remoto a tu dispositivo. Si un sitio te pide que ejecutes comandos, ciérralo inmediatamente.
Q1. Recibes una llamada de alguien que dice ser ayudante del sheriff. Le dicen que ha faltado al servicio de jurado y que se ha emitido una orden de arresto contra usted, a menos que pague inmediatamente una multa de 500 dólares con una tarjeta regalo. ¿Qué tiene que hacer?
A) Pagar la multa, no quieres que te detengan.
B) Pídeles el número de placa y el departamento, cuelga y llama directamente al juzgado utilizando el número oficial.
C) Pide que te envíen primero la orden por correo electrónico
D) Paga la mitad ahora y negocia el resto más tarde
Respuesta: B) Pídeles sus datos, cuelga y llama directamente al juzgado utilizando el número oficial.
Por qué: Las verdaderas fuerzas del orden no exigen un pago instantáneo, y menos con tarjetas regalo. Urgencia + métodos de pago inusuales = estafa.
P2 - Aparece una ventana emergente en tu iPhone: "Apple Security Breach - Your Apple ID has been compromised. Llame inmediatamente al Soporte de Apple: 1-800-XXX-XXXX". El logotipo parece real y el número parece oficial. ¿Qué hay que hacer?
A) Llamar inmediatamente al número que aparece en la ventana emergente.
B) Cerrar la ventana emergente, ir directamente a apple.com/support y utilizar sólo el número de contacto oficial de Apple.
C) Reinicia el teléfono y llama al número si vuelve a aparecer la ventana emergente.
D) Haz una captura de pantalla y envíala al número para verificarlo.
Respuesta: B) Cierre la ventana emergente y vaya directamente a la página de soporte oficial de Apple.
Por qué: Las empresas legítimas no utilizan ventanas emergentes con números de teléfono al azar. Esas alertas están diseñadas para apresurarte a llamar a los estafadores.
P1 - Suena una alarma en tu portátil y aparece una ventana emergente a pantalla completa: "VIRUS CRÍTICO DETECTADO - Llame al Soporte de Microsoft AHORA: 1-800-XXX-XXXX". La pantalla se congela. ¿Qué debe hacer?
A) Llame inmediatamente al número, parece oficial.
B) Forzar el cierre del navegador mediante el Administrador de tareas o forzar la salida y, a continuación, ejecutar el antivirus real.
C) Haga clic en el botón "X" de la ventana emergente para cerrarla.
D) Pague la cuota mostrada, probablemente se trate de una renovación de suscripción real.
Respuesta: B) Forzar el cierre de su navegador (Administrador de Tareas / forzar cierre), a continuación, ejecute su antivirus real.
Por qué: Esa ventana emergente es el clásico scareware - hacer clic en cualquier cosa o llamar al número sólo te arrastra más adentro
P2 - Recibe un mensaje de texto de "PennDOT" diciendo que su licencia de conducir será suspendida en 24 horas a menos que pague una multa pendiente a través de un enlace. El enlace parece oficial. ¿Cuál es la mayor señal de alarma?
A) Los organismos públicos nunca se ponen en contacto con usted por SMS con enlaces de pago.
B) El importe de la multa parece demasiado pequeño
C) Procede de un número desconocido
D) El mensaje no tiene faltas de ortografía
Respuesta: A) Los organismos públicos no envían mensajes de texto exigiendo el pago urgente a través de enlaces.
Por qué: La urgencia y la combinación del enlace de pago es lo que realmente delata, no la ortografía ni el formato.
¿Colgarías a tiempo?
4 casos reales de estafa. Lee cada uno de ellos y elige tu respuesta. A continuación, pulsa el botón para ver cómo lo has hecho.
P1 - La persona que llama dice que es del departamento de inmigración y que tu visado tiene un problema urgente. Exigen tu número de pasaporte inmediatamente para evitar la deportación. ¿Cuál es el indicio más sospechoso?
A) Mencionan la deportación
B) Llamada en frío + exigencia inmediata de información personal en el acto
C) Saben tu nombre
D) Tienen un nombre de departamento que suena oficial
Respuesta: B) Llamada en frío + exigencia inmediata de información personal en el acto
Por qué: Los organismos públicos legítimos no llaman en frío y te presionan para que les des datos confidenciales inmediatamente. La urgencia y la solicitud son la mayor señal de alarma.
P2 - La voz de la persona que llama suena ligeramente robótica pero muy formal. Le dan un número de identificación y le dicen que puede verificarlo en línea. ¿Qué hay que hacer?
A) Busca el número de placa que te han dado.
B) Cuelgue y llame al número oficial de la agencia desde su sitio web.
C) Pídeles que te envíen un correo electrónico
D) Preguntar por su supervisor
Respuesta: B) Cuelga y llama al número oficial de la agencia desde su página web
Por qué: Los estafadores pueden dar números de placa falsos y sitios de verificación falsos. Lo único seguro es ponerse en contacto de forma independiente con la agencia utilizando sus datos de contacto oficiales.
P3 - Un "funcionario de aduanas" dice que han interceptado un paquete a su nombre con artículos ilegales. Necesitan una tasa de tramitación para limpiar tu nombre. Esto es:
A) Un procedimiento aduanero legítimo
B) Una estafa de interceptación de paquetes: no hay ningún paquete.
C) Una cuestión de cumplimiento fiscal
D) Una tasa de redireccionamiento de entrega
Respuesta: B) Una estafa de interceptación de paquetes - no hay ningún paquete
Por qué: Se trata de una clásica táctica para asustar. No hay ningún paquete, sólo una historia para presionarle a pagar una "tasa" para solucionar un problema que no existe.
P4 - La persona que llama te advierte de que no le cuentes a nadie lo de la investigación o te arrestarán. Esta táctica está diseñada para:
A) Proteger sus derechos legales
B) Aislarle para que nadie pueda advertirle de que se trata de una estafa
C) Cumplir la ley de protección de datos
D) Verificar su identidad de forma segura
Respuesta: B) Aislarte para que nadie pueda advertirte de que es una estafa
Por qué: El secretismo es una gran señal de alarma. Los estafadores quieren aislarte de amigos o familiares que podrían ayudarte a darte cuenta de lo que está pasando.
Para más información, visita Scam Univeristy.
