12 Online Tricks Designed to Drain a New Yorker’s Bank Account

Your phone buzzes with a text about an unpaid toll. Your email says your account’s been locked. A pop-up screams that your computer has a virus.

Every one of these is bait, and the hook on the end of it is your bank account.

Scammers have gotten slick, and New Yorkers make tempting targets. The good news is that once you know the playbook, the tricks stop working.

Here’s what to watch for.

Note: This is general information, not legal or financial advice. If you think you’ve been targeted or scammed, contact your bank right away and report it to the FTC at ReportFraud.ftc.gov or the New York Attorney General’s office.

The Fake Toll Text

You get a text saying you owe a few dollars on an unpaid toll, with a link to pay before a late fee hits.

It looks like it’s from E-ZPass or Tolls by Mail, the names every New York driver knows.

It isn’t. The link goes to a fake site built to swipe your card number and bank login.

The FBI has warned about this one repeatedly, and it keeps spreading because it works.

Real toll agencies don’t collect through random text links. If you think you might owe, close the text and go straight to the official E-ZPass site or app yourself.

Don’t tap that link, ever.

The Package That Can’t Be Delivered

Right behind the toll text is the delivery text.

“Your package couldn’t be delivered. Update your address,” or “pay a small redelivery fee,” with a link.

The post office, UPS, FedEx, all of them get impersonated.

You click, you land on a page that looks official, and you hand over your address, your card, sometimes your passwords.

The sign it’s a scam is the fee or the urgency. The real carriers don’t text you a link demanding payment to release a package.

If you’re expecting something, track it through the carrier’s own app or website.

Treat any surprise delivery text as a trap.

The Utility Shutoff Threat

Your phone rings, and a stern voice says your power’s about to be cut off. Pay the overdue balance in the next hour, or you’re in the dark.

In New York, that often means somebody pretending to be Con Edison or National Grid.

They lean on fear and a tight clock so you don’t stop to think.

The giveaway is the payment method. They’ll demand a gift card, a wire, or a payment app, which no real utility uses.

Hang up. Call Con Ed back at the number on your actual bill, not the one the caller gives you.

A real utility gives you written notice and plenty of time, not a one-hour countdown.

The Bank “Fraud Alert” That’s the Fraud

This is the costliest trick going, so pay close attention.

You get a call or text claiming to be your bank’s fraud department, warning of suspicious activity.

To “protect” your money, they say, you need to move it to a new account, or verify your login, or read back a code.

That’s the scam.

The FTC says fake bank alerts like these are behind the biggest impersonation losses in the country, with Americans losing billions to imposter scams last year.

Your bank will never ask you to move money to keep it safe. Hang up and call the number on the back of your debit card.

The Code You Should Never Read Aloud

Banks and apps text you a six-digit code to confirm it’s you signing in.

Scammers want that code, badly.

The trick: They call pretending to be your bank, say they’re sending a verification code, and ask you to read it back to them.

The second you do, they’re into your account.

That code is the key to your front door. Handing it over lets a stranger walk right in.

No legitimate company will ever call and ask you to read them a code they just sent. Not one.

The Computer Pop-Up Emergency

You’re online, and a window pops open: Your computer’s infected, call this number now, don’t shut down or you’ll lose everything.

It’s fake.

Call that number, and a friendly “technician” talks you into letting them control your computer from afar, then goes hunting for your bank.

Older Americans get hit hard by this one. The FTC counted $159 million lost to tech support scams in a single year.

Microsoft and Apple don’t post phone numbers in scary pop-ups. Close the window, or shut the machine down if you have to.

Nobody legitimate locks your screen and demands a phone call.

The Frantic Call From a Grandchild

The phone rings late. It’s your grandson, voice shaking, saying he’s been in an accident or landed in jail and needs money wired right now.

And please, don’t tell his parents.

Here’s the chilling part: Scammers now use artificial intelligence to clone a loved one’s voice from a few seconds of audio found online.

It can sound exactly like him.

The FBI tied hundreds of millions in losses to these AI voice tricks last year.

Hang up and call your grandchild, or his parents, on a number you already have. The real family will answer.

A medical bill or a plane ticket to finally meet you.

Romance scammers play the long game, and they’re patient. They build trust first and ask for money later, often draining people of their savings a little at a time.

The pattern gives it away. They can never video chat, never meet in person, and always have a fresh emergency.

Someone you’ve never met in the flesh asking for money is the reddest of red flags.

Real love doesn’t arrive with a payment request.

The Can’t-Miss Investment

A stranger strikes up a friendly chat. Maybe it starts as a wrong-number text, or a new friend on social media.

Eventually, they let you in on an investment, usually crypto, with returns that look too good to be true.

They are.

The platform is fake, the gains on your screen are made up, and when you try to cash out, your money’s gone.

Investment scams are now the single biggest source of fraud losses in the country, and the FTC says social media is where many of them start.

If someone you met online is steering you toward an investment site, walk away.

Nobody messages a stranger to make them rich.

The Email From a Brand You Trust

An email lands from Amazon, Netflix, PayPal, or Apple. Your account’s on hold, your payment failed, click here to fix it.

The link takes you to a page that looks just like the real thing, down to the logo.

You log in, and you’ve just handed your username and password to a thief.

The tells are in the details. A slightly-off sender address, a generic “Dear Customer,” or a link that doesn’t match the real website.

Never sign in through a link in an email.

Open a new tab and type the company’s address yourself, or use their app.

A real account problem will be sitting there when you log in the normal way.

The Deal That’s Too Good to Be True

You’re scrolling, and an ad pops up.

Name-brand goods at a fraction of the price, a going-out-of-business blowout, a flash sale ending in minutes.

You order, your card gets charged, and either nothing ships or you get a cheap knockoff.

Worse, the site now has your card number.

Some of these fake shops also sign you up for a “membership” that bills you every month without you noticing.

The FTC traced more than two billion dollars in fraud losses to social media last year, much of it through ads like these.

Stick to retailers you know. If a deal seems impossible, it usually is.

The QR Code That Isn’t What It Seems

Here’s one creeping up fast: A scammer slaps a fake QR code sticker over a real one, on a parking meter, a flyer, or even a restaurant table.

New Yorkers have found phony codes pasted on city parking meters that send drivers to fake payment pages.

You scan it expecting to pay for parking and instead land on a site that grabs your card.

The same trick shows up in emails and on packages.