How to Spot Online Scams: Texts, Phishing and QR Codes

Scammers are getting smarter every year, and today’s fraudsters aren’t relying on broken English and obvious tricks. They’re using advanced AI tools to craft eerily convincing fake messages, clone real voices, and produce deepfake videos that are nearly impossible to distinguish from the real thing. McAfee antivirus and its AI-powered Scam Detector work around the clock to catch these threats automatically, but your own awareness is still the single most powerful first line of defense. Understanding what a scam looks like — before you click, reply, or scan — is how you stay one step ahead.

​

Warning Signs of a Text Scam

Text message scams, or “smishing,” have exploded in recent years because most people treat an incoming SMS as trustworthy by default. Scammers exploit that instinct. Watch out for these red flags in text messages:

• Unexpected package notifications. A text claiming your delivery is delayed or your package is held for a fee — especially when you haven’t ordered anything — is a classic smishing trigger. Legitimate carriers like UPS and FedEx never ask for payment via a text link.
• Prize or lottery winnings. If a message says you’ve won a gift card, lottery, or free vacation you never entered, you haven’t won anything. Clicking the link puts your data and device at risk.
• Suspicious shortened links. Scammers hide malicious URLs behind link shorteners. If a URL looks like a random string of characters, don’t tap it.
• Urgency and fear tactics. Phrases like “Your account will be suspended in 24 hours” or “Act now or lose access” are designed to make you panic and skip your better judgment. Pause, breathe, and verify through official channels.

​

How to Spot Phishing Emails

Phishing emails impersonate trusted brands — your bank, Amazon, the IRS, even McAfee — to steal your login credentials or financial data. Even savvy users get caught off guard. Here’s what to look for:

• Mismatched sender addresses. The display name might say “PayPal Support,” but the actual email address could be something like support@paypa1-help.net. Always expand the sender field and inspect the full address.
• Grammatical errors and awkward phrasing. While AI is making scam emails more polished, many still contain subtle errors in grammar, spacing, or brand formatting that a real company would never allow.
• Urgent requests for personal information. Legitimate organizations will never ask you to confirm your password, Social Security number, or credit card number via email.
• Suspicious attachments. An unexpected invoice, shipping label, or “important document” attachment could contain malware. Don’t open attachments from senders you weren’t expecting.

​

QR Code Scams

QR codes have become a staple of everyday life — menus, parking meters, event check-ins — and scammers have noticed. A technique called “quishing” involves replacing legitimate QR codes with malicious ones that redirect you to credential-harvesting websites. You might encounter quishing QR codes in:

• Emails impersonating your bank or a delivery company
• Stickers placed over real QR codes in restaurants or parking lots
• Fake flyers advertising discounts or giveaways

Before you scan any QR code, use a scanner that previews the destination URL before loading it. If the URL looks unfamiliar, abbreviated, or unrelated to what you expected, don’t proceed.

​

Deepfake Video Scams

AI can now clone a celebrity’s face, a CEO’s voice, or even a family member’s likeness with startling accuracy. Deepfake video scams typically appear as urgent appeals — a public figure promoting a fake investment, a boss asking for an emergency wire transfer, or a “friend” requesting gift card help. How to approach videos with healthy skepticism:

• Pause before acting. Any video that asks for money, login credentials, or personal information should raise an immediate flag, regardless of who appears to be speaking.
• Look for visual glitches. Deepfakes sometimes show unnatural blinking, odd skin textures around the hairline, or lips that don’t perfectly sync with the audio.
• Verify through a different channel. If a video purportedly from your bank or a colleague is asking you to act, call them directly using a number you already have on file.

​

How McAfee Protects You

Knowing the warning signs is essential, but having automated protection running in the background means threats get caught even when you’re not paying close attention. McAfee antivirus goes far beyond traditional virus scanning — it layers real-time AI threat detection directly into your everyday communication channels. McAfee Scam Detector automatically scans incoming texts and emails for risky links, flagging suspicious messages before you ever tap on them. It covers text scams, email phishing, and even QR code traps — so you get a warning in real time, right when it matters most. McAfee Deepfake Detector takes protection a step further by analyzing the audio track in videos to detect AI-generated voices. Available on Windows, it alerts you the moment synthesized speech is detected — before you’re convinced to act on false information. Behind both tools is McAfee Smart AI™, which processes more than 4 billion threat scans every single day. That volume of intelligence means McAfee’s models identify emerging scam patterns faster than any individual could, continuously learning and updating to keep pace with evolving tactics. Together, these features give you a layered defense: your own awareness as the first filter, and McAfee’s AI as the safety net that catches what slips through. The fastest way to get all of these protections active is to complete your McAfee antivirus activation at mcafee.com/activate using your 25-digit product key.

​

Activate McAfee Scam Protection Today

You now know the warning signs — but awareness alone isn’t enough when scammers are using sophisticated AI against you. Pair your knowledge with real-time, AI-driven protection. Visit mcafee.com/activate to activate your McAfee subscription using your 25-digit product key and get Scam Detector, Deepfake Detector, and McAfee Smart AI™ working for you starting today.