How to spot a digital scam: the signals this simulator trains

The simulator shows real and fraudulent messages — emails, texts, WhatsApp, QR codes, phone calls and apps — to train your eye before the real one arrives. Every trap is based on real scams described in the book.

The signals that give away almost every scam:

• They ask for one of four things: money, personal data, verification codes, or urgent action.
• The address looks right but isn't: domains with extra words (yourbank-security.com), swapped letters (faceb00k.com) or shortened links that hide the destination.
• Manufactured urgency: "24 hours", "your account will be suspended". The rush exists so you don't think.
• Prizes you never entered for plus small fees to "release" them: the prize doesn't exist; your card does.
• The golden rule: never act from the message; go to the official app yourself or call the usual number.

Content based on the free book A Hacker's Security Guide by César Cerrudo, available in PDF and Epub under a CC BY 4.0 license in English, Spanish and Portuguese.