Common Identity Theft Scams and How to Avoid Them

Millions of Americans spend countless hours online watching videos, posting updates, shopping, checking account balances, and chatting with friends and family. Unfortunately, criminals called scammers target these online users to try to obtain sensitive information from them for illegal purposes.

Scammers often send messages to innocent online users and request their personally identifiable information (PII). A successful scammer can use carefully crafted messaging to convince their target that their intentions are good and their requests for PII are legitimate. They might obtain PII such as email addresses, passwords, home addresses, bank account numbers, and even social security numbers, and use this information to commit identity fraud.

Knowing what to look out for can help you protect yourself from online scammers.

These scams involve criminals who send fake messages that appear to be from a legitimate organization or company, asking you to click on a link to provide personal or financial information. In some sophisticated cases, just clicking on the link can provide the cybercriminal with a way to hack into your information. Here are some examples that fall under phishing:

• Tech support scams: Cybercriminals pretend to be technical support personnel from a reputable company (like Netflix or Amazon) and trick victims into clicking a link to update their billing information, install malware, or gain remote access to their computers or devices.
• Lottery and sweepstakes scams: Cybercriminals contact victims and tell them they have won a large sum of money in a lottery or sweepstakes, but must pay a fee or provide personal information to claim the prize.
• Charity donation scams: Cybercriminals pretend to be representatives of a legitimate charity or nonprofit organization and solicit donations from victims, but then keep the money for themselves.
• Investment scams: Cybercriminals promise high returns on investments with little or no risk, in exchange for your personal or financial information.

These scams involve criminals who use fake online personas to convince victims to send money or provide personal information. This is a more long-term play in which the cybercriminal pretends to have a relationship with a victim until they can get what they are looking for once the victim lets their guard down.

1. Email
2. Phone
3. Text message
4. Social media
   

Be aware of the actions you can take to protect yourself. Research and stay updated with new information and products to avoid scams.

Before taking any action, verify the legitimacy of the message's source.

• For example, if you receive an email from a company asking you to click on a link, double-check the sender's email address and compare it to the company's official email address. Spam emails usually include numbers or symbols and are very lengthy.

Legitimate companies or organizations should not ask for sensitive information, such as your Social Security Number or bank account details via email or text message.

Use strong, unique passwords for all your accounts, and do not share them with anyone. Consider using our password manager to help you create strong passwords and store/remember them for you in a secure app.

Install anti-virus software and keep your device software current. This can help protect your devices from malware that scammers may use to access your personal information.

If you suspect that you have been targeted by a scam, report it. Most products allow you to mark your emails or text messages as spam. You can even report to the relevant authorities, such as the Federal Trade Commission (FTC) or the Better Business Bureau (BBB).

Remember: Always be cautious and skeptical of unsolicited messages or offers, especially if they seem too good to be true or use fear tactics to pressure you into taking immediate action. This year, the FTC has already received 5.7 million total fraud and identity theft reports, 1.4 million of which were identity theft cases.¹ If you know what to look for, you can protect yourself from falling victim to an identity theft scam.

For our members: AAA is often misrepresented by scammers who are working to get your money or personal information. If you're unsure of an offer, please reach out to Member Services (found on the back of your membership card) to verify.

This article was originally published in the fall of 2024. It was recently updated in August 2025 to include additional information.

1. IdentityTheft.org. 2023 Identity Theft Facts and Statistics. https://identitytheft.org/statistics/

Disclosure: This article provides general guidance and information. It is not intended as, nor should it be construed to be, legal, financial or other professional advice. Please consult with your attorney or financial advisor to discuss any legal issues or financial issues involved with credit decisions. Service provided by Experian®