Scam Prevention
You Searched for Help. A Scammer Answered First.
For years, the safety advice was simple: don't trust the phone number in that email. Don't trust the link in that text. If you need to reach your bank, your pharmacy, or Medicare, close the message and look it up yourself.
That advice was right. It's also no longer enough.
Scammers have figured out that you'll search for the number yourself — so they've made sure they're the one you find. Fake customer service listings, cloned websites, and paid ads impersonating real banks, tech companies, and government agencies now regularly outrank the genuine ones in search results. You do everything you were told to do. You still end up on the phone with a criminal.
This isn't a reason to stop searching for help online. It's a reason to know exactly what you're looking at before you dial or click.
The Habit That Used to Keep You Safe
"Look it up yourself" became standard advice because it broke the scammer's biggest advantage: urgency inside a message you didn't ask for. A scam email creates panic and hands you a number. Searching independently was supposed to remove that pressure and put you back in control.
For a long time, it worked. Search engines mostly returned official company pages, and scammers hadn't yet figured out how to compete for that space.
That's changed. Search results are no longer a neutral, trustworthy list of "the real thing, first." They're a mix of paid advertising, search-engine-optimized content, and business directory listings — and every one of those channels can be bought, faked, or manipulated by someone with no connection to the company you're trying to reach.
The habit didn't stop working because you did something wrong. It stopped working because the thing you were trusting changed underneath you.
How a Scammer Out-Ranks a Real Company
None of this requires hacking anything. It requires exploiting systems that were built to be open to anyone willing to pay or put in the effort.
Paid search ads. Anyone can buy an ad that appears above the actual search results for almost any search term — including a company's own name. A scammer can run an ad for "Bank of America customer service" that appears before Bank of America's real website does. The only difference is a small "Sponsored" label most people never notice.
Cloned websites. Copying the look of a real company's website takes a scammer an afternoon, not a team of engineers. A convincing fake login page or "contact us" page is often good enough to fool someone moving quickly — the same technique behind fake online stores that never ship what you ordered.
Fake business listings. Online business directories and map listings can be created by anyone. A fraudulent "customer service" listing with a working phone number can sit right next to legitimate ones, with no verification that it belongs to the real company.
SEO-optimized scam content. Scammers write entire fake help pages — "How to reset your Medicare password," "Contact Amazon delivery support" — stuffed with the right keywords to rank well, especially for narrow, specific searches that don't have a lot of competition from the real company's own content.
Put together, these tactics mean the top result for a search is no longer a reliable signal of authenticity. It's a signal of who spent the most money or effort to be seen — and scammers are often more motivated than the real company's marketing department.
Where This Shows Up Most Often
This pattern concentrates in a handful of places, mostly because these are exactly the moments when someone is searching quickly and wants a fast answer.
"Customer service" and "fraud department" numbers. Searching for your bank's fraud line — often while already worried about a suspicious charge — is one of the most exploited searches there is. A fake number answers, "confirms" a fraud alert, and asks you to "verify" your account by reading back a code or your card number.
Tech support searches. "Printer won't connect," "how to fix slow computer," "Norton customer service phone number" — these searches lead to an enormous ecosystem of fake tech support sites designed to get you to call a number that ends with someone requesting remote access to your computer. Our guide to tech support scam calls covers exactly how that call unfolds once you dial.
Medicare, Social Security, and IRS lookalikes. Searches for help with Medicare enrollment, Social Security benefits, or a tax question are frequent targets for cloned or ad-based scam pages, because the real agencies have complicated navigation and people are often frustrated enough to click the first thing that looks helpful. See our breakdowns of IRS scam calls, Social Security scam calls, and Medicare scams for the agency-specific versions of this same pattern.
Package delivery and carrier support. "USPS package stuck" or "FedEx delivery help" searches, especially around holidays, lead to fake tracking pages and fake support numbers that ask for a "redelivery fee" via gift card or wire transfer. Our package delivery text scam guide covers the text-message version of the same con.
Pharmacy and prescription refill support. A search for a pharmacy's refill line can surface a fake number that "confirms your insurance" by collecting your Medicare number and date of birth.
The common thread across every one of these: the search felt like the responsible thing to do. That's exactly why it works.
What Happens After You Call
The call itself is usually where the real damage happens — and it's built to feel completely normal.
A scammer answering a fake "fraud department" line will often already sound professional, use hold music, and reference generic account activity ("we're seeing some unusual charges") vague enough to apply to almost anyone. From there, the goal is nearly always one of three things: get you to read back a one-time verification code sent to your phone, get you to say your full card or account number "to verify your identity," or get you to install remote access software "to help resolve the issue."
Once any of those happens, the scammer has what they need — often within minutes of you feeling like you did everything right by looking the number up yourself.
What This Looks Like, Step by Step
Here's how a search like this typically plays out, so you know exactly what to watch for.
You notice a charge on your statement you don't recognize. You want to call your bank's fraud department right away, so you search "[Your Bank] fraud department phone number." The first result has an ad label you don't notice, or a listing that simply looks official — the right logo, the right colors, a professional-sounding name.
You call. Someone answers quickly, says your bank's name, and references "some unusual activity" on your account — vague enough to sound like it matches what you were already worried about. They ask you to "verify your identity" by confirming your card number and the three-digit code on the back. Then they mention they're sending a one-time code to your phone "to confirm you're the account holder" and ask you to read it back.
That code is the real bank's actual verification step for a password reset or a new device login. Reading it back doesn't verify anything to the person on the phone — it hands them the ability to get into your real account.
The entire call can last under five minutes. Nothing about it feels rushed or suspicious in the moment, because the script is built specifically to sound like routine bank security.
The only point where this breaks down is earlier than most people expect: at the search result itself, before the call ever happens.
A Conversation Worth Having With Family
If you have a parent, spouse, or friend who handles phone and computer support for the rest of the household, this is worth a short conversation — not because anyone's been careless, but because "just search for the number" is exactly the advice most of us learned to trust, and it's the advice that most needs updating.
Agree on a shared rule: for banks, Medicare, Social Security, and any account tied to money, the number always comes from a card, a statement, or official mail — never from a search result, even a first one. It's a small change that closes off the exact gap scammers are counting on.
Five Ways to Verify Before You Trust a Result
You don't need to stop searching for help. You need a habit that adds one extra step before you call or click.
Check for the "Sponsored" label — and skip it. Any result marked "Ad" or "Sponsored" at the top of a search page can be purchased by anyone. Scroll past paid results and look for the company's actual verified domain in the organic results below.
Use the number already in your possession. The back of your debit or credit card, a recent account statement, or official mail from Medicare or Social Security all have verified contact numbers you don't have to search for at all. When in doubt, this is always the safest option.
Go straight to the official app instead of a browser. If you have your bank's or pharmacy's official app already installed, use it to find support contact information rather than searching the open web. Apps downloaded directly from your phone's official app store are far harder for scammers to fake convincingly.
Type the web address directly instead of searching for it. If you know a company's actual website address, type it into your browser's address bar rather than searching for the company name. This bypasses paid ads and search rankings entirely.
Slow down anytime a call asks you to "verify" information. No legitimate fraud department, government agency, or tech support line will ever ask you to read back a one-time code sent to your phone. That single request is one of the most reliable scam signals that exists — treat it as a hard stop, hang up, and call back using a number from your card or a bill.
A Layer That Blocks the Bad Sites Automatically
Checking every search result carefully takes attention and time you won't always have, especially when you're worried and moving quickly. A tool that quietly filters out known scam and phishing sites before you ever land on one removes a lot of that pressure.
NordVPN includes Threat Protection, a feature that blocks known malicious and phishing websites, trackers, and malicious ads automatically — before the page even loads. If a search result leads to a site NordVPN has flagged as fraudulent, it stops the connection rather than leaving you to spot the fake yourself. It runs quietly in the background on your phone and computer, and the first month is free to try.
This doesn't replace careful judgment. It's a safety net underneath it — useful on exactly the fast, high-pressure searches where a careful second look is easiest to skip.
Affiliate Disclosure: This article may contain affiliate links. If you make a purchase through these links, we may earn a small commission at no extra cost to you. We only recommend products we genuinely believe in. This helps support our work and allows us to continue providing free content.
The Real Lesson Here
The advice to "look it up yourself instead of trusting the message" wasn't wrong. It was built for a version of the internet where the top search result was almost always the real thing.
That's no longer a safe assumption. The result at the top of the page today reflects who paid for placement or worked hardest to rank — not who's telling the truth about who they are.
The fix isn't to stop searching. It's to treat the first result the same way you'd treat an unexpected phone call: worth a second look before you trust it with anything.
A few habits worth keeping:
- Skip "Sponsored" results entirely when looking for support numbers
- Use the number on your card, statement, or official mail whenever it's available
- Type known web addresses directly instead of searching for them
- Treat any request to "read back a verification code" as an automatic hang-up
- Add a layer like NordVPN's Threat Protection to catch what a quick glance might miss
You did the responsible thing by searching instead of clicking a link in a strange message. The next step is simply making sure what you found is actually who it claims to be.
Last updated: 2026-07-16
Get ClearShield's free weekly safety briefing.
One email per week. One clear, practical tip to help you stay safe and confident online. No jargon. No scare tactics. Just what actually matters.