Overview
The victim expects to protect their funds from what they think is a hacker, fraud, drug smugglers, or some other dangerous situation that has endangered their money.
How It Works
The scammer, impersonating a person of authority such as a tech company, bank official, or government agent (and sometimes both), tells the victim that they are calling to warn the victim that criminals are putting the victim's funds in danger.
The scammer convinces the victim to move their money to a different account to 'protect' it from this situation. The most common stories are that the funds have been flagged for fraud, have been stolen, or are about to be stolen.
The scammer may also use threats such as that if the victim does not act now, the funds will be lost forever. Or, the scammer may claim that even if the funds are saved, they will become wrapped up in a criminal investigation and will be inaccessible for a long period of time.
The scammer often implies to the victim that there is reason to believe that the victim might be an accomplice to the phantom crime. This convinces the victim to cooperate with the fake "investigation".
Some versions of the scam have the victim wire money from one account to another. Other versions of the scam have the money moved into a cryptocurrency account the scammer controls, via a crypto ATM. Still other, more elaborate versions of the scam have the victim cash out the money into gold bars which are picked up by the scammer or an associate.
Sometimes called 'phantom hacker' scam or 'safe account' scam.
Related Articles
Been targeted by the Apple Pay scam? You probably will be, Consumer Affairs, 2026-04-08
A warning to San Diegans: If someone says the government wants you to buy gold — don't, San Diego Tribune, 2026-03-25
Superceding Indictment for US v Lam, et al, US Justice Department case - covers techniques for the 'protect your money' scam
Listed as a "top 10 scam of 2025" by Vermont Attorney General, VermontBiz January 12, 2026
Synthetic Examples
Note that the more sophisticated versions of this scam do not start with a text message; they start with a phone call. However, here are some sample synthetic "protect your money scam" text examples. (Many of these texts could also be 2.2.3 Spoofed Or Phishing Interaction Scam bait.)
6.3 Sample Data 1 - count: 500. With fake phone numbers and urls
6.3 Sample Data 2 - count: 260. With fake phone numbers and urls
Related Scams
2.2.1 Virus Malware Tech Support Scam: Both the Protect Your Money scam and the Tech Support scam are telephone-intensive scams that involve abuse of authority, impersonation, and threats. Both have the potential for high financial losses.
Related Crime Schemes
A particular instance of this scam may embed one or more of these related schemes.
Data Loss or Theft: Any scheme that results in victim losing data/scammer stealing data. Data in this context can mean login credentials, credit card details, or other personal or corporate information.
Extortion: Extortion refers to any scheme that uses a threat of additional damage to extract payment from the victim.
Victim Targeting Context
The scammer may use one or more of the following techniques to reach the victim.
Spray and Pray / Scattered: The scammer approaches many victims at once such as through bulk email or SMS.
Targeted Conversational Approach: The scammer approaches the victim through online conversation or other targeted method.
Social Engineering: Psychological Manipulations
The scammer may use one or more of these psychological techniques to accomplish the scam.
Authority: The scammer employs an abuse of a position of authority to convince the victim to go along with the scam.
Not A Scam: The scammer goes to great lengths to convince the victim the scheme is not a scam, or leverages the victim's prior scam awareness in some way.
Shame: The scammer tries to make the victim feel some shame or embarrassment in order to get them to go along with the scam.
Threats: The scammer employs threats to increase fear in the victim so that they will go along with the scam. Threats can include financial loss, legal action, arrest, account closure, extortion, blackmail.
Urgency: The scammer employs urgency to increase the likelihood that the victim will take action.
Social Engineering: Impersonation Techniques
The scammer may impersonate one or more of the following groups as part of the scam.
Banking / Finance: The perpetrator impersonates a banking official or financial institution.
Government Official: The perpetrator impersonates a government official.