The One Rule That Stops Most Scams

Every scam ever invented – the phone call from “the IRS,” the text from “your bank,” the email from “your boss,” the AI-cloned voice of “your grandchild” – has one thing in common. It needs you to act before you think.

Not before you notice a typo. Not before you check a link. Before you think.

That is the one weakness every scam shares, and it is the one thing you can always use against them. I want to share a simple two-part framework that catches the vast majority of scams, even the sophisticated AI-powered ones that are nearly impossible to tell apart from the real thing.

---

Why Scams Work (It Is Not Because You Are Gullible)

Here is something most people get wrong about scams: they assume the victims were careless or not very tech-savvy. That is simply not true. Scams work on doctors, engineers, security professionals, and yes, on people who write guides like this one.

Scams work because they target something deeper than knowledge – they target your emotions. When you feel afraid, excited, or rushed, the rational part of your brain takes a back seat. Psychologists call this an amygdala hijack. I call it the moment the scammer wins.

Think about it this way: if someone hands you a calm, clearly worded letter and says “take your time reading this,” you will catch every inconsistency. But if someone calls you in a panic saying your bank account is being drained right now, the last thing you are thinking about is whether the caller ID checks out.

Scammers know this. Every technique they use – urgency, threats, flattery, fear – is designed to keep you in that emotional state long enough to get what they want.

The good news? Once you know how to recognize that emotional push, you have already won most of the battle.

---

PUSHED: The 6 Feelings Scammers Use Against You

I use the word PUSHED because that is exactly what it feels like. When a scam is working on you, you feel pushed toward doing something. Each letter stands for a specific emotion scammers exploit.

P – Pressure

This can be blunt or subtle. The blunt version is an authoritative voice demanding you comply: “This is the fraud department. You need to act now.” The subtle version is excessive politeness that makes you feel obligated – someone being so kind and apologetic that saying no feels rude.

Both versions do the same thing: they make you feel like you cannot push back.

What it sounds like:

• “I need you to handle this personally – do not loop anyone else in.”
• “I am so sorry to bother you, I know you are busy, but I really need this one small favor…”
• “As your supervisor, I am directing you to process this immediately.”

U – Urgency

Anything that shrinks your window to think. Countdown timers, deadlines, words like “immediately” and “right now.” Legitimate organizations almost never operate this way. Your bank is not going to close your account because you did not respond to an email in two hours.

What it sounds like:

• “Your account will be locked in 30 minutes.”
• “This offer expires at midnight.”
• “We need your response within the hour or we will proceed without you.”

S – Surprise

Scammers love catching you off guard. An unexpected message from your CEO. A package delivery you do not remember ordering. A voicemail from a government agency you have never dealt with. When something comes out of nowhere, your normal pattern recognition is disrupted – and that is exactly the point.

What it sounds like:

• “We found a problem with your tax return from 2023.”
• “Your package could not be delivered – click here to reschedule.”
• “Hi, this is the CEO. I need a quick favor before the board meeting.”

H – High Stakes

When something important is on the line – your money, your job, your safety, your reputation – fear takes over. Scammers manufacture high-stakes situations because scared people do not pause to verify.

What it sounds like:

• “If you do not pay this fine, a warrant will be issued for your arrest.”
• “We have detected unauthorized access to your account. Your funds are at risk.”
• “We have information about you that will be released publicly unless you respond.”

E – Excitement

Not all scams use fear. Some use the opposite – the thrill of something amazing happening. A dream job offer. A prize you “won.” An exclusive investment opportunity. Positive emotions bypass your skepticism just as effectively as negative ones.

What it sounds like:

• “Congratulations! You have been selected for a $5,000 gift card.”
• “I came across your profile and I think you would be perfect for this role. The salary is $200K.”
• “This investment opportunity is only available to a select few.”

D – Desperation

This is the empathy play. Someone is in trouble, and you are the only one who can help. It might be a fake charity after a disaster, a “stranded friend” who needs money wired overseas, or an AI-cloned voice of a family member begging for bail money. Scammers weaponize your compassion.

What it sounds like:

• “Mom, I am in jail and I cannot call anyone else. Please do not tell Dad.”
• “I am stuck overseas and my wallet was stolen. Can you wire me money to get home?”
• “I know this is an unusual request, but my job is on the line. Can you just process this one payment?”

---

VERIFY: 6 Steps to Check Before You Act

Recognizing the emotional push is step one. Step two is having a reliable process to check whether the situation is real. That is what VERIFY gives you – six steps you can follow in order, no matter what channel the message came through.

V – View Carefully

Look closely at who is actually contacting you. Not the display name – the real identity behind it.

• Email: Click on the sender’s name to see the actual address. “Amazon” displaying as [email protected] is not Amazon.
• Phone call: Caller ID can be faked to show any number, including your bank’s real number. The number on your screen means nothing by itself.
• Text message: Same as phone calls – the sender name or number can be spoofed.
• Video call: AI can generate realistic faces and voices in real time. If someone’s appearance looks slightly off, or their expressions seem a beat too slow, pay attention to that instinct.

E – Evaluate Context

Ask yourself: does this make sense given what I actually know?

• Were you expecting this message? Did you actually order a package, request a password reset, or apply for this job?
• Is this how this person or organization normally contacts you? Does your boss usually text you about wire transfers, or do those go through an approval system?
• Does the timing make sense? Why is this arriving at 11 PM on a Saturday?
• Have you ever interacted with this person or company before?

Context is one of your strongest defenses. A lot of scams fall apart the moment you ask, “Wait, why would they contact me about this?”

R – Request Examination

Look at what they are actually asking you to do. Strip away the emotion and the story, and focus on the action they want.

• Are they asking for money, passwords, security codes, or remote access to your device?
• Are they asking you to bypass normal procedures?
• Is the request unusual for this sender or organization?
• Would you be comfortable describing this request to a friend or coworker?

Often, when you isolate the request from the emotional wrapping, it becomes obviously suspicious.

I – Interrogate Action

Challenge the urgency. Ask yourself why this supposedly cannot wait.

• What actually happens if I take ten minutes to verify this?
• Can I confirm this deadline through official channels?
• If I push back or ask questions, do they get frustrated or increase the pressure?

Here is a reliable tell: legitimate organizations will not have a problem with you taking time to verify. Scammers will. If pushing back makes the other person more aggressive or more desperate, that itself is a red flag.

F – Freeze

This is the most important step. Stop before you do the thing they are asking you to do.

• Do not click links in unexpected messages.
• Do not download software someone is asking you to install.
• Do not share passwords, PINs, or one-time security codes.
• Do not send money through gift cards, wire transfers, or cryptocurrency.
• Do not call phone numbers provided in suspicious messages.

Use these phrases to buy yourself time:

• “I am going to verify this through the official website first.”
• “Let me call you back on the number I have on file.”
• “I need to check with someone before I proceed.”

You do not owe anyone an instant response. You do not need to be polite to someone who might be stealing from you. Hanging up, closing an email, or ignoring a text is always an option.

Y – Your Instincts Matter

Trust that gut feeling. If something feels off – even if you cannot put your finger on exactly what – that reaction is worth listening to. Your brain picks up on subtle inconsistencies before your conscious mind can name them.

Maybe the tone of the email does not match how your coworker usually writes. Maybe the caller’s story has a detail that does not quite add up. Maybe the whole situation just feels a little too convenient or a little too alarming.

You do not need proof to pause. You do not need to justify your discomfort. “Something felt wrong” is a perfectly valid reason to stop and verify through another channel.

---

Why This Still Works in the Age of AI

You may have heard the old advice: “Look for typos and bad grammar to spot a scam.” That advice is dead. AI can write flawless emails, generate convincing voices, and even create realistic video of people who do not exist.

But here is what AI cannot do: it cannot change the fact that every scam still needs to manipulate your emotions.

An AI-written phishing email might have perfect grammar, a believable story, and a professional layout. But it still needs to make you feel pushed – pressured, urgent, surprised, scared, excited, or desperate. It still needs you to act before you verify.

That is why PUSHED and VERIFY work even when the technology behind scams gets better. They do not rely on spotting mistakes in the message. They rely on recognizing the feeling the message creates in you and then following a process to check whether it is real.

The grammar might be flawless. The voice might sound exactly like your boss. The video call might look completely real. But if you feel PUSHED, stop and VERIFY. That rule does not have an expiration date.

---

3 Quick Scenarios

Scenario 1: The Email From “Your Bank”

From: Chase Fraud Protection <[email protected]>

Subject: Suspicious activity detected on your account

Dear valued customer,

We detected an unauthorized transaction of $2,847.00 on your account. If you did not authorize this transaction, please verify your identity immediately to prevent further charges.

Click here to secure your account: [Verify Identity Now]

You have 24 hours before your account will be temporarily frozen for your protection.

PUSHED check: Urgency (24-hour deadline), high stakes (nearly $3,000 charge), surprise (you did not expect this), pressure (account freeze threat). You feel pushed – that is your signal.

VERIFY check: The email address is chase-secure-verify.com, not chase.com. You were not aware of any unusual charges. They want you to click a link rather than log in through the app you already have. They are manufacturing a deadline.

What to do: Do not click anything. Open the Chase app on your phone or type chase.com into your browser yourself. Log in normally. If there is a real problem, you will see it there. You can also call the number on the back of your card.

---

Scenario 2: The Phone Call From “IT Support”

Your phone rings. The caller says: “Hi, this is the IT help desk. We have detected malware on your laptop that is actively sending data to an external server. We need to install a remote access tool right now to clean it, or we will have to wipe your machine. Can you go to this website and download our support tool?”

PUSHED check: Urgency (“right now,” “actively sending”), high stakes (losing your data, your computer getting wiped), pressure (authority of IT department), desperation (framed as an emergency where every second counts).

VERIFY check: Your computer has been working normally. IT usually contacts you through a ticketing system, not a cold call. They are asking you to download software from a website they provide – that is a significant ask. What actually happens if you take five minutes to verify?

What to do: Say, “Thanks for letting me know. I am going to contact the help desk through our normal portal to follow up.” Hang up. Submit a ticket or call IT using the number from your company’s internal directory. Report the suspicious call.

---

Scenario 3: The Text From “Your Daughter”

New number, Mom. My phone broke and I am using a friend’s. Can you send me $300 through Venmo? I need it for the repair and they close in an hour. I will pay you back Friday. Please do not call my old number, it is totally dead.

PUSHED check: Urgency (one-hour deadline), desperation (stranded without a phone), pressure (it is your daughter asking), surprise (unexpected situation from an unknown number). The request to not call the old number is a classic move – it prevents the one action that would immediately expose the scam.

VERIFY check: This is a new, unknown number. You cannot verify it is actually your daughter. She is asking for money through a payment app, with a tight deadline, and specifically asking you not to use the one method that would confirm her identity.

What to do: Call your daughter’s real number. If it goes to voicemail, text her real number. Call another family member who might be with her. Do not send money until you have confirmed it is really her through a channel you trust. If it is genuinely your daughter, she will understand you taking five minutes to verify.

---

The Bottom Line

You do not need to be a technology expert to protect yourself from scams. You do not need to understand how AI voice cloning works or what a homograph attack is. You need exactly one skill: the ability to notice when someone is pushing you to act fast, and the discipline to slow down instead.

When you feel PUSHED, stop and VERIFY.

That is the rule. It works on emails, phone calls, text messages, social media, video calls, and whatever new channel scammers dream up next. It works against AI-generated scams just as well as it works against a badly spelled email from a fake prince. It works because it targets the one thing that never changes: the scammer’s need for you to act before you think.

---

Quick Reference

PUSHED – Am I feeling…

• Pressured to comply?
• Urgent, like I must act now?
• Surprised by something unexpected?
• High-stakes fear about consequences?
• Excited by something too good to be true?
• Desperate to help someone in trouble?

VERIFY – Before I act, let me…

• View carefully who is really contacting me
• Evaluate whether this makes sense in context
• Request examination – what are they actually asking for?
• Interrogate the urgency – why can this not wait?
• Freeze – stop before clicking, sending, or sharing
• Your instincts – does something feel off?

If even one PUSHED feeling is present, run through VERIFY before you respond. It takes two minutes. It could save you thousands.