Keeping your money safe (fraud, scams, 2FA)

The situation

A text lands: “ALERT: unusual activity on your account. Verify immediately or it will be locked,” with a link. Your stomach drops and your thumb hovers over the link. That spike of panic is the entire point — scams are engineered to make you act before you think. Knowing the playbook turns that panic into a shrug.

The idea

Keeping your money safe comes down to three things: spot the scam, lock the account, and know what to do if you’re hit.

1. Spot the scams

The most common ones aimed at beginners all share a fingerprint — urgency plus a request for information or money:

• Impersonation. Someone pretends to be your bank, the IRS, a utility, or even a “boss” or “family member” in trouble. Real institutions don’t cold-call demanding payment or passwords.
• Phishing texts and emails. A fake “your account is locked / package failed / payment declined” message with a link to a lookalike login page that steals what you type.
• “Verify your code” calls. A caller asks you to read back the code that was just texted to you. That code is your security key — handing it over hands them your account.
• Fake check / overpayment. Someone “accidentally” overpays you and asks you to send the difference back. Their check bounces later; your real money is gone.

The rule of thumb: no real bank, agency, or company will ever ask for your password, full card number, or a one-time code — and anyone rushing you is rushing you for a reason. When in doubt, hang up and contact the company yourself using the number on your card or app, never the one they gave you.

2. Lock the account with 2FA

Two-factor authentication (2FA) adds a second step to logging in — usually a code from an app or a tap on your phone — on top of your password. It matters because passwords leak constantly in data breaches; 2FA means a stolen password alone isn’t enough to get in. Turn it on for your bank and your email first (your email is the master key that can reset everything else). Where you have the choice, use an authenticator app rather than text-message codes — texts can be intercepted, app codes can’t.

3. Know what to do if you’re hit

Speed limits the damage. If you suspect fraud or identity theft:

1. Call your bank or card issuer right away (the number on the back of the card) to freeze or replace the card and dispute the charges.
2. Freeze your credit with the three credit bureaus — it’s free, blocks new accounts from being opened in your name, and you can lift it anytime.
3. Report it. The official US site for an identity-theft recovery plan is IdentityTheft.gov, and your bank and the CFPB can guide you through disputing unauthorized charges.
4. Change passwords on the affected accounts (and any account that shared that password), and turn on 2FA if it wasn’t already.

By the numbers

There’s no dollar table here — the math of safety is simpler than that. 2FA takes about two minutes to switch on. A credit freeze is free and reversible. Reporting fast can be the difference between a canceled card and months of cleanup. Set up the protections now, while nothing’s wrong, so that the day a scary text arrives, you already know it’s just a text — and your accounts are locked tight behind a second key.