Skip to content

If something feels wrong

Recognise → pause → verify

Start with the pattern library, then follow the response checklist before making or discussing any further payment. You do not need to investigate the sender yourself.

The response checklist

Six steps before you act

Pause the request. If money moved or an account may be affected, contact the provider through its official channel promptly.

01 /

Pause rushed requests.

Take time before making another payment.

02 /

Verify independently.

Use a number or website you located yourself.

03 /

Never share security codes.

Do not share security codes, gift-card numbers or redemption details.

04 /

Retain the record.

Keep payment receipts, messages and relevant transaction details.

05 /

Contact your provider.

Contact your payment provider promptly through its official channels.

06 /

Report concerns.

Report concerns to the appropriate authorities in your location.

By stage

Trust, transfer, disconnect

Each stage has its own warning indicators and safe next steps. The examples support recognition; they do not establish that fraud occurred.

01 / Trust

Borrowed or impersonated trust

Someone appears to speak for a person or organisation already trusted. Warning: unexpected changes or requests. Verify using contact details you already know or find independently; do not rely on the message's contact route.

Explore borrowed or impersonated trust
02 / Transfer

Recognise the payment request

A requested payment method, recipient relationship or account role may be a reason to pause. The method or location alone does not prove fraud. Warning signs include urgency, secrecy, gift-card codes, cash delivery or unexplained use of a personal account.

Explore Transfer guidance
03 / Disconnect

Recognise the break; protect the record

Either party may disconnect. The perpetrator often cuts contact after payment while the victim may keep trying to reach them. Preserve messages, call details, receipts and transaction references, and contact the provider through an official channel.

Explore the disconnect pattern

High-risk requests

Payment methods that raise the risk

Defensive guidance only. Do not use these examples as instructions for moving funds; verify a request independently before acting.

Rushed transfer under a claimed threat

Urgency and pressure are warning signals. The threat may be imaginary or exaggerated. Verify the claim separately and contact your payment provider promptly if money moved.

Personal account used as a clearing account

Funds may be routed through an account holder with no legitimate relationship to the final recipient. Flag unexplained pass-through activity, do not forward funds and contact the account provider.

Cash sent by mail

A high-risk request may involve an intermediary or cash mule. Do not send cash. If already sent, preserve packaging, instructions and delivery evidence and seek provider guidance.

Gift card payment or redemption code

This is a high-risk request: codes can be transferred quickly and are difficult to recover. Never share codes or photos of them. Keep receipts and seek retailer or provider guidance.

Provider and reporting actions

If money or access has already moved

Promptly contact the relevant provider through an official channel, secure affected accounts and seek guidance from the appropriate local reporting service.

Focus on preventing further loss and preserving useful information. Warnings include sudden silence, shifting accounts or renewed demands.

Find reporting guidance

Use official account-recovery guidance, change affected passwords, enable multi-factor authentication, review active sessions and alert contacts through a separate trusted route.

Contact Agboola Alli