Why clever people still get caught by scams

Many older adults who have been scammed say the same sentence: “I felt so stupid – I should have known.” In reality, most scams are designed by people who study human behaviour. They are not testing your intelligence; they are testing your stress levels.

Scammers know that:

• When you are scared, you read less carefully.
• When you feel rushed, you rely on habit instead of double-checking.
• When a message uses big organisations’ names – your bank, the NHS, the council – you are more likely to obey without question.

This guide is not about turning you into a security expert. It is about learning a handful of slow-down habits that work even when you are tired, in pain or anxious, so you can keep more of your attention for the things you care about.

The “emergency and urgency” test – first red flag

Nearly all scam messages try to create an emergency in your mind. They might say:

• “Your account will be CLOSED in 2 hours unless you click here.”
• “We have detected suspicious activity – confirm your details NOW.”
• “You are owed a refund, last chance to claim.”
• “Your NHS record is blocked – update your payment details immediately.”

Real organisations do sometimes send urgent messages, but they rarely combine:

• Strong emotional language and
• Pressure to act immediately and
• A request for sensitive details (full passwords, PINs, card numbers).

A simple rule you can use is:
“If a message makes my chest tight, I will slow my body down before I touch any link.”

Take three slow breaths, then move to the next checks below.

Texts (SMS and messaging apps) – treating links as locked doors

Scam texts often pretend to be from:

• Banks and building societies
• Parcel companies
• The NHS or GP surgeries
• Government agencies (tax, benefits, TV licence, council)

A few practical habits:

• Do not click links in texts about money, deliveries or refunds. Instead, open your bank or NHS App the way you usually do, or type the known website address manually.
• Check the number or sender name. Scammers can fake names, but if the number looks like a normal mobile, it is unlikely to be your bank.
• Ignore spelling tricks. Some scammers deliberately include slightly wrong spelling to filter out cautious people and keep only those who rush. Careful reading is a strength, not a weakness.

If you suspect a scam text from a bank or official body, many providers allow you to forward the message to their own security team. Your bank or a trusted relative can help you find the correct reporting number.

Emails – slowing down before you click

Email scams often copy the colours and logos of real organisations. It is like someone wearing a stolen uniform – they may look official from far away but fail small tests up close.

Ask yourself:

• Who is it really from?
  Click or tap on the name of the sender to reveal the full email address. An NHS email should normally end in something like @nhs.net or @nhs.uk, not @nhs-check.com or other odd endings.
• How are they addressing me?
  Many scam emails say “Dear Customer” or use your email name instead of your real name. Your bank or GP usually knows your proper name.
• What are they asking for?
  Real services almost never ask for your full password, PIN, or for you to move money to a “safe” account via email.

A rare but useful habit is to read the email aloud in a calm voice, as if you were reading it to a friend. Your ear will often hear things your eyes skim past – odd phrasing, unnecessary pressure, or promises that feel “too good”.

Phone calls – separating the voice from the instruction

Phone scams are powerful because a real human voice can sound reassuring, impatient or authoritative. Scammers may pretend to be from:

• Your bank’s fraud department
• The police
• Technical support for your computer, internet or television
• The NHS or a GP receptionist

Some principles to protect yourself:

• You are allowed to hang up. A genuine caller will not be offended if you say, “Thank you, I will call the official number myself” and end the call.
• Use your own numbers. If a caller asks you to confirm information or move money, hang up, wait a few minutes (or use a different phone), and then call the organisation back on the number printed on your card, letter or official website.
• Never install software or give remote access. Unless you started the call yourself to a trusted support line and are absolutely sure who you are speaking to, do not allow anyone to control your computer or phone remotely.

If you feel confused on a call, it is a sign to slow things down, not to speed them up.

The “three gate” safety test for any message

To reduce overload, you can treat every suspicious message as passing through three simple gates:

• Gate 1 – Source: Did they contact me first, or did I contact them? Incoming, unexpected contact is higher risk.
• Gate 2 – Speed: Are they asking me to act immediately or to keep things secret? Real services allow time for questions and checks.
• Gate 3 – Secrets: Are they asking for passwords, PINs, one-time codes, or to move money? Your bank, the police or the NHS will never ask you to move money to a “safe account” they control.

If a message fails any of these gates, your safest next step is usually to contact the organisation directly using details you already trust.

Protecting your emotional health after a scam attempt

Even when you spot a scam in time, it can leave a bruise on your confidence. You might think about it repeatedly, feel cross with yourself, or start to mistrust all messages, even genuine ones.

A few gentle steps:

• Tell someone you trust. Naming what happened out loud often shrinks the fear and shame.
• Write down the details. Time, date, what was said, what they asked for. This helps if you later decide to report it, and stops the memory swirling around in your head.
• Notice your body. After a scare, it is common to feel shaky, tense or sick. Simple grounding – feet flat on the floor, a warm drink, slow breathing – gives your nervous system a signal that the danger has passed.

If you have been scammed and lost money, you are not alone. Many strong, capable people have been caught; the shame belongs to the criminals, not to you. Banks and support organisations can advise what to do next.

Looking after joint health and vision while staying scam-aware

Scam awareness is not just a mental skill – it has a physical side too. Older adults with:

• Poor lighting may miss tiny changes in web addresses or spelling.
• Stiff hands or tremor may find it harder to tap the right button on small screens.
• Chronic pain or fatigue are often too exhausted to read carefully, which is exactly when scammers strike.

You can reduce physical strain by:

• Using a larger screen (tablet or laptop) to read important messages instead of a small phone when possible.
• Increasing text size and turning on “high contrast” or “bold text” in device settings.
• Reading important messages at a time of day when you usually feel clearest, not late at night when you are half-asleep.

You might find it helpful to pair this guide with our article on getting started with smartphones, tablets and laptops, so your physical setup supports your safety decisions.

Talking about scams in families without blame

Many families only talk about scams after something bad has already happened. By then, people can be too upset or ashamed to listen. A different approach is to treat scam conversations like fire drills – practice for emergencies that you hope never come.

You might say to a family member:

• “If I ever get a strange message about money or the NHS, my plan is to ring you before I respond. Is that okay?”
• “Can we agree that if you think I’ve been targeted, you’ll talk to me calmly, not shout? I want us to be on the same side.”
• “Let’s make a list of the official numbers I should use if I’m worried – bank, GP, NHS 111.”

Simple agreements like this turn scams from a private fear into a shared problem that you face together.

When online scams affect your health decisions

Scams are not only about money. Some fake messages:

• Offer unproven “miracle cures”.
• Spread false information about vaccines or medications.
• Pretend to be from medical research studies asking for personal details.

If you ever receive a message about your health that feels alarming or pushes a product, ask:

• “Is this information also on the official NHS or recognised charity website?”
• “Have I seen anything like this in leaflets from my GP or hospital?”
• “Could I show this message to my GP, pharmacist or nurse and ask: does this fit with my treatment?”

Never stop or change prescribed medication because of something you have read in a message, on social media or on a website, without discussing it with a qualified health professional first.

How PHAT fits into your safety and confidence plan

PHAT cannot stop scams from being sent, but we can:

• Offer trusted, calm health information that you can return to instead of random alarming websites.
• Use our Zoom sessions and education to practise real examples of scam messages in a safe environment.
• Support you to build daily routines – movement, rest, connection – so that you meet the online world in a steadier state, not at your most exhausted.

Over time, the aim is for you to feel that your money, your health information and your attention are not wide open to whoever shouts loudest online. They are guarded by simple habits, trusted people and organisations who are genuinely on your side.