DarkDeckBETA
Scams and phishing
A scam works by making you hurry. The best defence is to slow down and check another way.
- Urgent, scary or too-good-to-be-true means stop.
- Do not use the link or number in the message. Go to the site yourself.
- If you clicked or replied, it is okay. Follow the steps in 'If something goes wrong'.
The warning signs
- Pressure. "Act now", "your account will be closed", "final warning".
- A request for something secret. Passwords, codes, recovery phrases, card details.
- A link or file you were not expecting, even from someone you know. Their account may have been taken over.
- Small oddities. A slightly wrong address, odd spelling, a greeting that does not use your name.
- Payment in unusual ways. Gift cards, crypto, bank transfer to a new account.
Scams aimed at musicians and creators
- Fake "collaboration" or label offers that send a file or a link to "listen to the demo" or "sign the contract". The file is the trap. Ask for a normal streaming link, and check the sender through another channel.
- Fake copyright or "your channel will be deleted" notices. Real platforms tell you inside your account, not through a chat message with a link.
- Fake verification, promotion or playlist offers that ask for a fee, your login or a code.
- Overpayment tricks. A buyer sends too much and asks you to refund the difference. The first payment later fails.
- Fake "sponsorship" requests from a brand asking you to install software or open a form.
How to check
- Stop. Do not click, download or reply yet.
- Open the real site or app yourself, by typing the address or using your own bookmark, and look for the same message there.
- For a message from a friend, ask them on a different channel, such as a phone call.
- Hover over a link (or press and hold on a phone) to see where it really goes before you open it.
- If you are still unsure, ask someone you trust. Asking is never silly.
QR codes and short links
A QR code or shortened link hides where it goes. Be careful with ones on stickers, flyers and unexpected messages, and look at the address your phone shows before you continue.
Where to report
Reporting helps protect others. In the UK, forward suspicious emails to report@phishing.gov.uk and texts to 7726, and report fraud to Action Fraud. In the US, use reportfraud.ftc.gov. Elsewhere, search for your country's fraud reporting service.
General guidance, kept up to date as best we can. It is not legal or professional advice.