ICU6
ReportAlerts

Scams

Financial and technical scams: how to spot them and protect yourself.

What it is

Techniques aimed at extracting money or data: promises of gains, bogus investments, impersonation, fake tech support, fake sites, phishing, wire-transfer fraud, etc. Common vectors include email/SMS (phishing/smishing), calls (vishing), social networks, classifieds, messaging apps, misleading ads and search results.

Common vectors

  • Email/SMS (phishing/smishing), shortened links, booby-trapped attachments
  • Calls from “advisors/technicians” (vishing), caller-ID spoofing
  • Social networks and messengers, fake profiles and groups
  • Mirror sites and ghost shops (misleading ads, SEO/SEA)

Common examples

  • Fake tax refunds, “held” parcels, bogus bank/CAF/Ameli support
  • Phantom e-commerce sites, abusive dropshipping, fraudulent marketplaces
  • Fake investments (crypto, NFT, “guaranteed” trading), “financial coach” pitches
  • Tech-support scams (remote control, fake antivirus)
  • Relationship scams: romance scams, “relatives” in distress
  • Classifieds: fake buyers/sellers, bogus escrow payments

How to respond

  1. Don’t act in a rush: cut contact, don’t pay, don’t share codes
  2. Check the URL and sender (spelling, HTTPS, WHOIS, legal notice, SIREN/SIRET)
  3. Beware of unusual payment methods (crypto, gift cards, instant transfers to a new beneficiary)
  4. Keep evidence (anonymized screenshots, full emails) and report to ICU6
Report Learn more

Understanding and avoiding scams: the in-depth guide

Anatomy of a scam

Typical flow: lure (promise, fear, urgency) → first contact → data harvesting → payment (or account/device takeover) → laundering/dispersal of funds. Scammers use scripts, call centers, mirror sites, and remote-access tools.

Typology (quick reference)

  • Phishing/Smishing/Vishing (email/SMS/call)
  • Fake investments (crypto, NFT, trading, “guaranteed” opportunities)
  • Bogus tech support (remote control, “security” software)
  • Romance scams and fake relatives in distress
  • Delivery/tax/bank/agency scams
  • Classifieds/marketplace scams (buyer/seller)
  • Wire-transfer fraud, identity and brand impersonation

Red flags to spot

  • Urgency, threats, “guaranteed” promises, too-good-to-be-true offers
  • Typos/misleading URL, missing legal notice, inconsistent SIREN/SIRET
  • Requests to install remote-access tools (AnyDesk, TeamViewer…)
  • Untraceable payments demanded: crypto, gift cards, instant transfers
  • Pressure to keep it secret and not tell anyone

Quick check (5 min)

  1. Keep captures/URLs (mask your sensitive info)
  2. Verify URL/domain (spelling, HTTPS, WHOIS, legal notice)
  3. Search for reviews/alerts, check site age and postal address
  4. Test an independent channel (official number, brand’s website)
  5. If in doubt, do not pay and verify through an independent contact. Reporting to ICU6 does not guarantee an individual reply.

If you paid or gave access

  • Contact your bank immediately via the official number; request chargeback/dispute per payment method
  • Block the card, halt transfers, review newly added beneficiaries
  • Change passwords, enable 2FA, sign out suspicious sessions
  • Uninstall any remote-access tool you installed at their request
  • File a police report and keep all evidence (transaction refs, conversations)

Preserve & share evidence

  • Screenshots (with date/time), emails with full headers, received files
  • Addresses, IBAN, caller numbers, URLs, profile/listing IDs
  • Don’t share files publicly if they contain unredacted personal data
  • Remove your personal information before sending it to ICU6. Sources remain private; a limited card may be published with your permission.
Report Learn more