Scam phone calls and the callback trick
Not every scam arrives as a link. Some arrive as a phone call, or as an email whose only goal is to get you to call a number. A real person on the line is persuasive in a way a spam filter cannot catch, which is exactly why scammers use it.
The callback trap
You get an email: "Your subscription has renewed for $499. To cancel, call this number." There is no link to click, so it slips past filters, and the shock of a charge you did not make gets you to phone.
The person who answers is the scammer. They will try to walk you into installing remote-access software, reading out a code, or accepting a "refund" that actually moves money out of your account. The absence of a link is the trick, not a sign it is safe.
Fake tech support and account alerts
A pop-up or a caller claims to be from Microsoft, Apple, your bank, or a government agency, and says your computer is infected or your account is compromised. Real companies do not cold-call you out of the blue to say this.
They create fear, then offer to fix it if you let them in or confirm details. Hang up. No legitimate support team needs remote control of your device from an unsolicited call.
The one rule that beats all of it
If a message or call pressures you to act, stop and call back on a number you already trust: the one on your card, on the company's real website, or in your contacts. Not the number in the message.
That single habit defeats the whole category, because it takes the scammer's chosen channel away and puts you back in control.
Protect the people who are targeted most
Older relatives are a favourite target for the "grandchild in trouble" and "your account is frozen" calls. It helps to agree in advance: we will always hang up and call back on a known number, and no real emergency is ruined by taking five minutes to check.
The short version
- An email that wants you to phone a number (no link) is often a callback scam.
- Real companies and agencies do not cold-call to say your device is infected.
- Hang up and call back on a number you already trust, never the one you were given.
- Agree the call-back rule with family before they need it.
Build the reflex, not just the knowledge.
BadgerQuest is a two-minute daily game that keeps this instinct sharp. Free for individuals, no card.
Play a round free →Training a team instead? See pricing · Voice scams in clinics and practices
Common questions
What is a callback or TOAD scam?
Telephone-oriented attack delivery: an email or text with no link, just a phone number to call, usually about a charge or problem. Because there is nothing to click, it evades filters, and the scammer does the rest by voice once you call.
Will my bank ever call and ask me to move money or read a code?
No. A real bank will never ask you to move money to a "safe account", read out a one-time code, or install software from an unsolicited call. If in doubt, hang up and call the number on the back of your card.
How do I know a phone number is really my bank's?
Do not use a number from an email, text, or caller. Use the number printed on your card, your statement, or the official website you navigate to yourself.