What Is an Online Scam? A Plain-English Definition
A plain-English definition of an online scam, everyday examples of each main kind, and where scams end and hacking begins.
An online scam is a deliberate trick, carried out through the internet, text messages, phone calls or apps, that persuades you to hand over money, personal information or access that you would never give if you knew the truth. The key word is persuades. In a scam, the criminal does not break in. They get you to open the door.
That simple idea explains why scams work on careful, intelligent people, and why the best defence is not technical knowledge but a few habits.
The three things scammers want
- Your money, through a payment you make yourself: a fake purchase, a "fee", an investment, a transfer to a "safe account".
- Your information: passwords, one-time codes, card numbers, ID numbers and personal details that can be used or sold.
- Access: to your accounts, your device through remote access software, or your organization's systems.
Often a scam aims for all three in stages. A fake delivery text collects card details, and a follow-up "bank" call uses them to talk you into approving a transfer.
Everyday examples
| Kind of scam | What it looks like |
|---|---|
| Phishing | An email or text that looks like it is from your bank, a courier or a service you use, with a link to a fake login or payment page. |
| Impersonation | A caller or message pretending to be your bank, the police, a government agency, your boss or a family member. |
| Shopping scams | A shop or seller that takes payment and never delivers, often advertised on social media. |
| Advance-fee scams | A prize, inheritance, loan or job that needs "just a small fee" first. |
| Investment scams | Promises of guaranteed or unusually high returns, often in crypto or trading platforms. |
| Romance scams | An online relationship that eventually turns into requests for money. |
| Tech support scams | Pop-ups or calls saying your device is infected, followed by a request for remote access or payment. |
| Job scams | Offers of easy, well-paid work that require fees, or that turn you into a money mule. |
Where scams end and hacking begins
People use "scam", "fraud", "phishing" and "hacking" as if they mean the same thing. They overlap, but the difference matters because it tells you what to do next.
- A scam relies on deception. You take the action: you pay, you share, you click, you install.
- Hacking means someone gets into a system or account without permission, for example by exploiting a weakness or using a leaked password.
- Fraud is the wider legal term for gaining money or advantage by deception. Most scams are a form of fraud.
In practice, many attacks combine them. A phishing message (a scam) steals your password, which is then used to get into your account (hacking), which is then used to trick your friends (another scam). Our guide to the difference between scams, fraud, phishing and hacking explains which response each needs.
What all scams have in common
The details change constantly, but the pattern does not. Almost every scam includes:
- A contact you did not expect, or one that moves you away from an official channel.
- A story that makes the request seem reasonable: a problem, a prize, a relationship, an opportunity.
- Pressure: urgency, fear, excitement or secrecy that stops you checking.
- An ask: money, a code, a password, a download or personal details.
Our guide to the four stages of every scam shows how to break the chain at each one.
A useful rule: if an unexpected message asks you to pay, share a code or password, or install something, stop and check through a channel you find yourself. That single habit defeats most scams.
Why scams are so common now
- They are cheap to run. Sending a million messages costs very little, and only a handful need to work.
- Payments are fast. Instant transfers and mobile money are convenient for everyone, including criminals.
- Personal details are easy to find, from social media and data breaches, which makes messages more convincing.
- AI tools help scammers write fluent messages in any language and imitate voices and faces.
What to do if you think you have found one
- Do not reply, click or pay.
- Check independently, by contacting the organization or person through details you look up yourself.
- Get a second opinion. Paste the message into CyberWatch AI Scan for a free check.
- Report it and delete it. If you have already paid or shared details, act quickly; our first-hour checklist puts the steps in order.
This is the starting point. For warning signs, the most common scams, and how to protect yourself and your family, read the complete guide to online scams.
Frequently asked questions
What is the simplest definition of an online scam?
An online scam is a deliberate trick, carried out through the internet, phone messages or apps, that persuades you to give away money, personal information or access you would not have given if you knew the truth.
Is a scam the same as a hack?
Not quite. A scam tricks you into acting, for example paying or sharing a code. A hack breaks into a system or account without your help. Many attacks combine both: a scam message steals a password that is then used to break in.
Are online scams illegal?
Yes. Scams are a form of fraud, which is a crime in virtually every country, and you can report them to your national fraud or cybercrime service.
Sources
- How To Avoid a Scam, US Federal Trade Commission
- Check if something might be a scam, Citizens Advice
- Phishing: spot and report scam emails, texts, websites and calls, UK National Cyber Security Centre
