Practical steps for recognising, checking, and responding to common scams affecting people who study, work, travel, or relocate internationally. The guidance applies across the UK, US, Canada, Europe, Australia, New Zealand, and India.
Visa and immigration messages
Fraudsters imitate immigration departments, visa advisers, embassies, and border agencies to demand money or identity documents.
Warning signs
The sender threatens arrest, deportation, cancellation, or a missed deadline unless you act immediately.
Payment is requested by gift card, cryptocurrency, wire transfer to a person, or another method that is difficult to reverse.
The visible sender name looks official, but the full email address uses a free mailbox or an unrelated domain.
The message asks for a passport copy, bank details, passwords, or one-time security codes through email or chat.
How to verify it
1.Open the immigration authority's website by typing its address yourself; do not use the message's link.
2.Sign in to the application portal you already use and compare the request, reference number, fee, and deadline.
3.Call the authority or licensed adviser using contact details published on its official website.
If you already responded
If you sent identity documents, contact the issuing authority and your local identity-theft service. If you paid, contact the payment provider or bank immediately and preserve the message and receipt.
University, tuition, and scholarship messages
Fake admissions, fee, and scholarship notices often copy logos and staff names from real institutions.
Warning signs
An offer or scholarship arrives unexpectedly and requires an application, release, processing, or insurance fee.
Tuition must be paid to a personal account or through a payment link that is not inside the institution's normal portal.
The sender discourages you from contacting admissions or says the opportunity must remain confidential.
The domain is misspelled, newly introduced, or different from the address shown on the institution's website.
How to verify it
1.Open the institution's website independently and contact admissions, finance, or the scholarship office directly.
2.Compare the course, applicant number, fee schedule, and bank details with your authenticated student portal.
3.Ask for written confirmation through your existing university account before sending money or documents.
If you already responded
Tell the institution's security team if its name is being impersonated. Ask your bank to trace or stop a payment, change any reused passwords, and monitor accounts connected to the information you shared.
Accommodation and rental listings
Rental scams use copied listings, false ownership claims, and pressure for deposits before a property can be verified.
Warning signs
The supposed owner cannot attend a viewing, refuses a live video tour, or says keys will be sent after payment.
The rent is unusually low and several months of rent or a deposit must be paid before a signed agreement.
Photos, addresses, or descriptions appear in another listing under a different name or price.
Payment is requested outside the established platform or to an account whose name differs from the contract.
How to verify it
1.Search the address and images, then compare the listing with established property sites and local rental prices.
2.Confirm the agent or owner's identity and authority to rent the property using the relevant local register where available.
3.Read the contract, verify deposit-protection requirements in that location, and get independent housing advice before paying.
If you already responded
Report the listing to the platform and local fraud service. Contact your bank quickly if you transferred money, and keep the advert, contract, account details, and conversation as evidence.
Job offers and recruitment
Fake recruiters exploit remote hiring and international relocation by offering roles without credible interviews or employer checks.
Warning signs
You are hired after a chat-only interview, offered unusually high pay, or asked to start before identity and contract checks.
You must buy equipment from a named supplier, pay for training or a visa, or deposit a cheque and return part of it.
The role involves receiving and forwarding money, parcels, or cryptocurrency through your own accounts.
Messages come from a free mailbox or a lookalike domain rather than the employer's published domain.
How to verify it
1.Find the vacancy on the employer's own careers page and contact its human resources team through published details.
2.Check that the recruiter works for the stated organisation and that the legal employer named in the contract exists.
3.Do not use your personal bank account for company transactions or provide identity documents before confirming the employer.
If you already responded
Stop contact if you were asked to move money or goods. Tell your bank, the genuine employer, the recruitment platform, and the appropriate fraud or labour authority in your country.
Phishing messages create urgency so you click a link, open an attachment, reveal a code, or move a conversation away from a trusted service.
Warning signs
The message claims a delivery, refund, tax bill, account lock, or security incident that you were not expecting.
A shortened link or QR code hides the destination, or the displayed text differs from the actual web address.
Someone claiming to be a bank, government department, colleague, or relative asks for a password or security code.
The conversation quickly moves to an encrypted chat and the sender resists independent verification.
How to verify it
1.Do not reply. Open the organisation's app or type its official address yourself and check for the same notice.
2.Call a known number or start a new conversation with the person through a separate channel.
3.Inspect the full sender and destination address; a padlock only shows the connection is encrypted, not that the site is honest.
If you already responded
If you entered a password, change it from a trusted device and end other sessions. Contact your bank for payment details, enable multi-factor authentication, and report the message through the service it used.
Suspicious letters, PDFs, and identity documents
A polished PDF, letterhead, signature, stamp, or identity image can be copied or generated and should not be treated as proof on its own.
Warning signs
Names, dates, reference numbers, fees, or contact details conflict across pages or with earlier messages.
The document tells you to verify it using a phone number, email, or website found only inside that same document.
Formatting, seals, signatures, or image quality vary, while the sender uses urgency to prevent further checks.
You are asked to enable macros, install software, or sign in after opening an attachment.
How to verify it
1.Contact the named organisation independently and quote the reference number without using details from the document.
2.Compare the document with current examples and requirements on the organisation's official website.
3.Treat automated analysis as a source of warning signs, not proof that a document is genuine or fraudulent.
If you already responded
Do not forward sensitive documents widely. Preserve the original file and message, run a security scan if you opened active content, and notify the legitimate organisation if its identity was copied.
A safer verification routine
Pause before acting, identify the claim being made, and verify it through a separate channel. Use contact details you find independently, compare names and payment details, and keep a copy of the original message. No single signal—including a familiar logo, a working website, or a low Credentara risk score—proves legitimacy.
If money, identity information, or account access is at risk, contact your bank or provider first, then the relevant police, fraud, consumer-protection, immigration, education, or labour authority in your country.
How this guidance is maintained
Credentara organises recurring warning signs into practical checks rather than declaring that a message or document is genuine. Guidance is reviewed when the site's supported checks or common scam patterns change. Community reports appear in public search only after moderation, and private uploads remain visible only to their owner.
This library provides general safety information, not legal, immigration, financial, or law-enforcement advice. Official procedures vary by country and can change, so confirm current requirements with the relevant authority.
Found a scam not listed here?
Submit the facts for review and help others recognise the same pattern.