Avoiding Online Scams

A “new buyer” can message you faster than a real person can type - then ask you to move to a different app, pay “just to hold” an item, or click a link that looks like the platform’s login page. A bot can also do quieter damage: it floods your follower list with accounts that never comment, then it “reacts” to your posts with the same generic praise over and over. If you run a marketplace, sell services, or just keep money and contacts in your phone, these accounts don’t just waste time. They push you toward transfers, credential theft, and account takeover.

This chapter teaches you how to spot fake profiles and automated accounts using real platform patterns and documented scam cases. After you finish, you’ll know what to check on a profile, how to test suspicious messages without getting tricked, and what outcomes to expect when an account is automated or impersonating someone. You’ll also get a step-by-step walkthrough using one realistic marketplace situation - so you can practice the same checks under pressure.

Learn the red flags of impersonators and automated accounts using real platform patterns and documented scam casesImpersonators and bots don’t all look the same, but they do repeat patterns. Court records and enforcement actions show that scammers often build “credible” profiles, then use consistent scripts: short messages, urgent money talk, and a push off the platform. Bots follow a different pattern: they create or interact at an unnatural speed, with repeated wording and the same “behavior style” across many accounts. If you learn the differences, you stop treating every suspicious account as equally dangerous, and you start making faster, safer decisions.

One useful reality check: even when people think “I would recognize a scam,” scammers still win because they borrow trust. On platforms like Facebook, X (formerly Twitter), Instagram, and common marketplaces, they imitate real people’s photos, names, and job titles. They then steer you away from platform safeguards - because platform tools often block suspicious payments and flag abnormal logins. In one widely reported case, the U.S. Department of Justice described a large-scale scheme that used impersonation and automated activity to trick victims into sending money and credentials; the pattern wasn’t a one-off. The scam infrastructure relied on fast outreach and repeatable scripts, which is exactly what you see when you look for bot-like behavior.

In another documented enforcement story, scammers used fake “support” accounts and cloned brand pages to contact victims and push them toward payment or “account recovery” steps. The common thread across these cases: the scammer profile looks normal at first glance, then the message asks for one risky action - move off-platform, pay immediately, or log in through a link. Your job is to catch that shift early, before you take the bait.

To make this practical, you’ll use a simple method: the Profile-Trust Checklist. It turns “gut feeling” into concrete checks you can do in under a minute per account.

Spot fake profiles fast with the Profile-Trust ChecklistStart with a quick definition so you know what you’re checking. A fake profile is an account that pretends to be a real person or organization but isn’t. An automated account (often called a bot) is an account that runs by script - posting, liking, or messaging on a schedule with little real human variation. An impersonator is a fake profile that targets trust by copying identity: profile photo, display name, or “work” details.

Use the checklist below when you meet a suspicious account on a platform message, comment, or direct chat. Keep your goal narrow: decide whether you should ignore, verify, or report.

Check the “identity anchors” (name, photo, and profile details)

Look for mismatches: different spelling from the real person, a photo that appears cropped or reused, or a “bio” that reads like a template.

Why this matters: impersonators need you to trust their identity fast, so they copy what’s visible first and ignore what’s harder to copy (consistent history).

Scan the account history for real-life signals

Look at when the account started posting and whether the content looks consistent over time (not just a burst of activity).

Why this matters: many bots launch, follow, and message in a short window, then repeat the same engagement patterns. Fake profiles often have thin history or sudden “new normal” behavior.

Measure message style: speed, urgency, and “move off-platform” pressure

Watch for phrases that push urgency (“right now,” “last chance,” “I already paid,” “hold it today”) and a request to switch to another app, email, or a link.

Why this matters: scammers use urgency to prevent you from checking their profile or contacting the real party through normal channels.

Test for “link and login” traps

If they send a link, don’t click....