How to Teach Students About Financial Scams

Most classroom scam examples are scams no student would fall for.

The message is full of spelling mistakes. A stranger promises a huge prize. Someone claiming to be the IRS demands gift cards. Students circle the red flags, laugh at the sender, and leave the lesson more confident that they would recognize a real scam.

That confidence can be dangerous.

A convincing scam may begin with something the person was already expecting: a job application, a package delivery, a bank alert, a message from a friend, or an opportunity connected to a real interest. The first contact may look ordinary. The pressure, payment request, or attempt to collect information may not appear until trust has started to form.

That is why teaching financial scams should not depend on students being able to “spot the fake” at a glance. Students need a response they can use even when they are unsure: stop before acting, leave the sender’s channel, and verify the request through contact information they found independently.

Then, if money or personal information has already been shared, they need to know what to do next without shame.

Start with the move that works even when the scam looks real

Red flags matter. Unexpected contact, pressure to hurry, impersonation, secrecy, unrealistic rewards, and requests for hard-to-reverse payments all deserve attention.

But a checklist has limits. A legitimate message can be unexpected. A scammer can use correct spelling, copy a real logo, name a real employee, or contact someone immediately after that person applied for a job. Students who believe scams always look unprofessional may trust the most polished message in the room.

Give them a response that does not require certainty:

1. Stop before acting. Do not click, reply, pay, deposit a check, or share a code while the request is creating pressure.
2. Step outside the message. Close the text, email, chat, or call. Do not use the link or phone number the sender provided.
3. Verify independently. Open the organization’s known website, use the number on a statement or card, contact the person through a previously saved method, or find the job on the employer’s official careers page.

The goal is not to prove fraud from inside the suspicious conversation. It is to find trustworthy evidence outside it.

Give students a message that could be legitimate

Dani has applied for several part-time and remote jobs. Two days later, this text arrives:

Hi Dani, I’m Reese with Northline Creative. We received your application for the remote project assistant position. Are you available for a short interview this afternoon?

Northline Creative is fictional, but students do not know yet whether the message is legitimate within the scenario.

Ask them what the message proves.

It shows that the sender knows Dani’s name, mentions a type of job Dani applied for, and wants to schedule an interview. None of those details verifies the sender. They may have come from a real application, a copied job listing, a public profile, or information shared elsewhere.

The correct response is not necessarily “block the number immediately.” It is also not “continue because Dani did apply.” Students need more evidence.

Ask how Dani could verify the contact without replying to the text. A strong plan might include finding the employer’s official website independently, checking whether the opening appears on its careers page, and contacting the company through a phone number or email address listed there.

This first round matters because it removes the easy answer. Students must practice verification before the scam becomes obvious.

Reveal the pressure one step at a time

Add one new message in each round. After every reveal, ask three questions:

• What changed?
• What should Dani avoid doing next?
• What independent check would answer the most important question?

Round 2: The interview moves to chat

The recruiter says the interview must happen through a messaging app. After a short text conversation, Dani is offered the job at $28 an hour and told that work can begin immediately.

A chat interview does not prove fraud by itself. The unusually fast offer and high pay for limited screening should make students slow down, however. Dani should verify that the position and recruiter exist through the employer’s official site before sending identification, tax forms, bank details, or other sensitive information.

Teach students to describe evidence precisely. “The interview was short, the offer came immediately, and the pay is high for the listed duties” is more useful than “The vibes are off.”

Round 3: The check arrives

The recruiter emails an image of a $2,450 check. Dani is told to deposit it using a banking app, keep $550 for initial pay and setup costs, and send $1,900 to an approved equipment vendor.

The transaction should stop here.

An honest employer does not send a check and instruct a new employee to send part of the money elsewhere. A bank may make deposited funds appear available before learning that a check is fake. If Dani sends the $1,900 and the check is later rejected, Dani may still be responsible for the money that left the account.

The phrase “the check cleared” can mislead students. Funds appearing in an account is not the same as the bank confirming that the check is legitimate.

A request to receive money and forward part of it can also be an attempt to recruit a money mule, someone used to move illegally obtained money for criminals. A person may believe they are performing a real job and still face serious financial or legal consequences. Students should never use a personal account to receive and transfer money for a supposed employer.

Round 4: The deadline appears

The recruiter says the vendor must be paid within 30 minutes or Dani will lose the position. The message also says not to contact the company’s main office because the equipment program is confidential.

Now students can see urgency and secrecy working together. The deadline is meant to keep Dani inside the sender’s conversation and away from anyone who could challenge it.

Ask students to write the next safe action in one sentence:

Dani should stop responding, avoid depositing or sending money, and contact Northline Creative through independently found information to ask whether the recruiter and position are real.

Students do not need to keep questioning the sender. The safer evidence is outside the chat.

Teach warning signs as reasons to pause

After students experience Dani’s offer, name the patterns they just saw.

A warning sign is a reason to pause and verify. It is not permission to accuse a real person publicly or treat one unusual detail as final proof.

That distinction prevents two mistakes: trusting a polished scam and labeling every unfamiliar message fraudulent without checking.

Make independent verification concrete

“Look it up” is too vague. Scam websites, copied listings, sponsored ads, and fake support numbers may appear in search results.

Give students a clear standard: use contact information that did not come from the questionable message.

Depending on the situation, Dani could:

• type the employer’s known domain rather than following a recruiter’s link;
• find the position on the official careers page;
• call the organization using a number published on that official site;
• contact a bank using the number on the back of the card or inside the banking app;
• reach a friend or relative through a saved number rather than replying to a new account; or
• ask a trusted person to review the request before money or information moves.

Searching the recruiter’s name is only one clue. The question is whether a trusted source confirms that this person is connected to the position and authorized to make the request.

Students should never investigate by continuing to engage a suspicious sender, clicking unknown files, or trying to “scam the scammer.”

Change the lesson after something has already been shared

Stopping before a loss is ideal, but a useful scam lesson cannot end there. Students also need a plan for the moment after someone realizes they may have acted.

Give different groups one of these outcomes.

Dani has the check but has not deposited it

Dani should not deposit the check or send money. Preserve the messages and check image, stop contact, verify the employer independently, and report the job scam to the platform where the listing appeared and at ReportFraud.ftc.gov.

Dani deposited the check but has not sent money

Dani should not spend the apparent funds. Contact the bank through its official fraud or customer-service channel, explain what happened, and follow the bank’s instructions. The balance shown in the account should not be treated as proof that the check is valid.

Dani sent money to the vendor

Dani should contact the bank, card issuer, payment app, wire-transfer company, gift-card company, or other payment provider immediately, report the fraudulent transaction, and ask whether it can be stopped or reversed. Acting quickly may help, but students should not be promised that the money will be recovered.

Dani shared a password or one-time code

Dani should reach the account through its official app or website, change the password, change it anywhere else it was reused, review account activity, and contact the provider. If a one-time code was shared, contacting the provider quickly is especially important.

Dani shared identifying information

If information may be used for identity theft, IdentityTheft.gov can create a recovery plan based on what happened. Depending on the exposure, the plan may include contacting affected companies, reviewing credit reports, or considering a fraud alert or credit freeze.

Students under 18 generally do not have credit reports unless a file exists for a legitimate reason, such as being an authorized user or joint account holder, or because of an error or identity theft. An unexpected file can therefore be a warning sign. A parent or guardian can ask the three credit bureaus to search for a minor’s file. For a child under 16, an authorized adult can request a free credit freeze; minors who are 16 or 17 may request and remove one themselves.

The exact response depends on what was shared and how payment was made. Students do not need to memorize every recovery step. They need to know that speed matters, the relevant company should be contacted through an official channel, evidence should be preserved, and federal reporting and recovery resources exist.

Discuss the scam without blaming the person

Avoid asking, “How could anyone fall for this?” The better question is, “What made this believable long enough for the next request to work?”

Dani had applied for jobs. The sender knew that. The early messages did not begin with gift cards or threats. The offer became more dangerous after it had been connected to something Dani wanted and expected.

That does not make Dani careless. It shows how context, excitement, authority, urgency, and isolation can be used together.

Use fictional messages and profiles. Do not ask students to disclose whether they or their families have lost money, shared information, or experienced identity theft. If a student chooses to disclose an experience, do not turn it into a case for classmates to analyze.

Also avoid presenting spelling mistakes as the main defense. Some scam messages are poorly written. Others are polished. Professional design is not proof of legitimacy, and awkward wording is not the only reason to verify.

The guide to talking about money in the classroom can help establish discussion norms that protect privacy and avoid shame.

Run Dani’s case in one class period

This sequence fits into about 40 minutes.

Establish the response: 5 minutes

Teach the three moves: stop before acting, step outside the message, and verify independently.

Show the first contact: 5 minutes

Give students only the opening recruiter text. Ask what it proves, what remains unknown, and how Dani could check without replying.

Reveal the offer: 7 minutes

Add the chat interview and immediate $28-per-hour offer. Students record the specific details that increase concern.

Reveal the check and deadline: 8 minutes

Show the $2,450 check instructions, $1,900 vendor payment, and 30-minute deadline. Students explain why the transaction must stop.

Assign the recovery branches: 10 minutes

Each group receives a different outcome: no deposit, deposited but not spent, money sent, credentials shared, or personal information shared. Groups identify the first official contact and the action Dani should take.

Exit ticket: 5 minutes

Ask:

Which detail first required Dani to stop? How should Dani verify the job independently, and what changes if money has already been sent?

Check whether students can respond, not merely recognize

A student who circles “urgent” and “gift card” has identified two warning signs. That does not yet show they know what to do.

A strong response should:

• describe the specific evidence that raised concern;
• avoid clicking, paying, depositing, or sharing more information;
• leave the communication channel controlled by the sender;
• choose an independent and credible verification route;
• identify the correct company to contact after money or information was shared;
• preserve useful evidence without continuing the conversation;
• use ReportFraud.ftc.gov or IdentityTheft.gov when appropriate; and
• avoid blaming the person targeted by the scam.

For a short transfer task, replace Dani’s job offer with a bank alert or message from a friend’s new account. Ask students to use the same response without relying on the job-specific warning signs.

The consumer skills guide connects verification to advertising, contracts, reviews, and complaint channels. The financial decision-making assessment guide can help evaluate how students use evidence and revise a response.

To use this lesson tomorrow, take one obvious scam example and rewrite its first message so it could plausibly be real. Reveal the pressure and payment request later. Students will learn more from deciding when to stop and how to verify than from laughing at a scam they never would have trusted.