Verify before you pay: the five scam shapes reaching Valley phones, and the numbers to call instead
Five schemes, one mechanism: each is built to stop you checking before you pay. This page is organised around the checking. Every entry gives the same five things — what it looks like, what not to do, how to verify independently, who to contact, and how to report — because a reader in the middle of one should find the same shape every time.
Published · evidence read to
Why the pressure is the tell, not the story
These schemes differ in costume and are identical in mechanism. Each manufactures a reason that checking is impossible right now: an account is being drained, a warrant is being issued, a toll is about to be referred, a grandchild is in a cell, a payment window is closing. The urgency is not incidental to the fraud; it is the fraud, because a person who can verify independently cannot be defrauded by any of them.
Two further consequences follow, and they are the practical core of this page. First, no legitimate agency, bank or utility will ever object to you calling them back on a number you looked up yourself — an objection to that is diagnostic. Second, the payment methods these schemes demand are chosen for irreversibility: gift cards, cryptocurrency, wire transfers, payment-app transfers to a person. A request for money in a form that cannot be recalled is the second reliable tell.
The five shapes
The bank or payment-app impersonation
What it looks like
A call or text says a fraudulent charge was detected. To “reverse” it you are asked to move money to a “safe account”, send it to yourself through a payment app, or read out a code just sent to your phone. Caller ID displays the bank’s real name and number, which is trivially spoofed and proves nothing.
What not to do
Do not move money anywhere. Do not read out any code. Do not continue the call — a genuine fraud team will not be inconvenienced by you calling back.
How to verify independently
Hang up. Call the number printed on the back of your card or on your statement. Ask whether an alert exists on the account.
Who to contact, and how to report
Your bank first, immediately — a transfer reported within minutes is sometimes recoverable, and one reported the next day rarely is. Report to the Federal Trade Commission at reportfraud.ftc.gov.
The cloned-voice family emergency
What it looks like
A call, often late at night, from a voice that sounds like a relative: an arrest, a crash, a hospital, a lawyer or bail agent who takes over the call. Secrecy is requested — do not tell the rest of the family. A short recording from social media is enough to produce a convincing clone.
What not to do
Do not send money, do not buy cards, do not meet anyone to hand over cash, and do not honour the request for secrecy. The secrecy request exists solely to prevent the one check that works.
How to verify independently
Hang up and call the relative directly on the number you already have. Call another family member. Agree a family verification word now, before it is needed — it costs one conversation and defeats the entire scheme.
Who to contact, and how to report
Local law enforcement if money has moved, and the Federal Bureau of Investigation’s Internet Crime Complaint Center. Elder financial abuse may also be reported to Fresno County Adult Protective Services.
The unpaid toll, delivery or DMV text
What it looks like
A text about a small unpaid toll, a held parcel or a licence about to be suspended, with a link and a modest sum — deliberately small enough to pay rather than argue about. The site that opens is a convincing copy and harvests the card details, which are then used elsewhere.
What not to do
Do not tap the link. Do not pay a small amount to make it go away — the amount is not the objective, the card number is.
How to verify independently
Open the toll operator, carrier or Department of Motor Vehicles site by typing the address yourself, and look for the charge in your own account. California toll agencies and the DMV do not collect by text link.
Who to contact, and how to report
Forward the message to 7726 (SPAM) to report it to your carrier, then delete it. Report to the FTC; for a DMV impersonation, also to the California DMV.
The Medicare or health-plan call
What it looks like
A caller offers a free brace, test kit, genetic screening or new card, and needs your Medicare number to process it. Sometimes framed as a plan-year check or a survey. The number is then used to bill for equipment or tests never provided — and the resulting record can obstruct a genuine claim later.
What not to do
Do not give your Medicare number, Social Security number or date of birth to anyone who called you. Medicare does not cold-call to sell equipment or issue new cards.
How to verify independently
Call 1‑800‑MEDICARE yourself. Read your quarterly Medicare Summary Notice against care you actually received — that document is where this fraud becomes visible.
Who to contact, and how to report
1‑800‑MEDICARE, and the California Senior Medicare Patrol. Free, non-commercial counselling is available through the state Health Insurance Counseling and Advocacy Program.
The utility shutoff threat
What it looks like
A call claims the power will be disconnected within the hour for non-payment and demands immediate payment by card, app or cryptocurrency. Frequently timed to a heat wave, and frequently directed at small businesses during trading hours, when the threat is most expensive to test.
What not to do
Do not pay by any irreversible method. No California utility disconnects a residential account within an hour by telephone, and none accepts payment in gift cards or cryptocurrency.
How to verify independently
Hang up and call the number on your printed bill. Statutory notice requirements and shutoff protections apply before any disconnection, and your account status is visible to you.
Who to contact, and how to report
Your utility’s published customer number, and the California Public Utilities Commission consumer affairs branch. Report the attempt to the FTC.
If money has already moved
Speed changes the outcome more than anything else on this page. Contact the bank, card issuer or payment app first, and use the word “fraud” rather than “mistake” — they route differently. A card transaction has chargeback rights; a wire, a cryptocurrency transfer or a person-to-person app payment usually does not, though a report made within minutes is sometimes intercepted where one made the next morning is not.
Then, in this order: change the password on any account you gave a code for, and enable two-factor authentication on it; place a fraud alert or a security freeze with the three credit bureaus; report to the Federal Trade Commission, which produces the recovery plan that many institutions ask to see; and file with the Internet Crime Complaint Center if the contact was electronic. Keep everything — screenshots, numbers, times, transfer references.
One thing not to do: respond to anyone who contacts you afterwards offering to recover the money for a fee. Recovery fraud is a distinct, well-documented second scheme that targets people already on victim lists, and it arrives precisely when judgement is worst.
This page reports what public documents say. It is not legal, financial, insurance or tax advice, and no professional relationship arises from reading it. Where it draws a conclusion, the conclusion is labelled and the counterargument is stated.