Learning vocabulary for phishing scams helps you recognise what a suspicious message is trying to make you believe and do. Begin with impersonation, urgency, verification, suspicious link, credentials, one-time password, spoofing and unauthorised transaction. These words matter because a scam message often sounds like an ordinary request until you notice its hidden demand.
A fake delivery notice, a supposed bank security alert or a message offering an easy job may ask you to follow a link, enter confidential details, send money or install software. Singapore’s ScamShield warns that scammers imitate familiar organisations and use pressure to make people act quickly. The safe starting point is do not click an unsolicited link or share secrets; contact the organisation through a verified app, website or phone number you found independently. If unsure, Singapore’s ScamShield Helpline is 1799.
This article teaches how to interpret the language and implied actions in suspicious messages. It is not a catalogue of every scam type. For a basic explanation of the scam itself, see What Is Phishing | How to Recognise and Avoid Online Scams. Here we turn vocabulary into a practical reading and decision-making skill.
Quick answer: read the message for these five warning patterns
- Sender claim: “We are your bank / courier / employer.” Ask whether the source is independently verified.
- Urgency: “Act immediately” or “within 10 minutes.” Pressure is not evidence.
- Threat or reward: “Your account will be suspended” or “claim your prize.” Identify the claimed consequence.
- Requested action: “Click”, “install”, “pay”, “transfer”, “scan” or “share your code”. This is often the decisive part.
- Verification route: ignore the link or phone number supplied in a suspicious message; use the known official channel to check.
- After a mistake: contact your bank immediately if account or payment details were exposed and report the suspected scam through official channels.
Definition lock: phishing, spoofing and verification are different
| Term | Plain-English definition | What it means in practice |
|---|---|---|
| Phishing | A deceptive attempt to obtain confidential information or induce harmful actions, often through fake messages or websites. | A message can look official while asking you to expose passwords or banking details. |
| Smishing | Phishing carried out through SMS or text messages. | The delivery channel is a text message; the deception is still phishing. |
| Impersonation | Pretending to be a person or organisation one is not. | A logo or familiar name does not prove identity. |
| Spoofing | Falsifying sender identity or other identifying information. | A displayed caller ID or sender name may be misleading. |
| Credentials | Information used to sign in or authenticate, such as usernames and passwords. | Do not enter them through unsolicited links. |
| One-time password (OTP) | A temporary code used in some authentication processes. | Never give a code to someone claiming to need it for verification. |
| Verification | Checking a claim against a trustworthy, independent source. | Open the known official app or type the trusted address yourself. |
| Unauthorised transaction | A movement of money or account action that the account holder did not permit. | Treat unexpected notifications seriously and contact the bank through its official channel. |
Notice the difference between claimed identity and verified identity. A message saying “We are the bank” makes a claim. A trusted banking app, reached independently and showing the relevant account information, is a stronger way to check. Even a message containing your correct name or personal information does not prove that the sender is genuine.
The 20 practical words grouped by what a scammer wants
Group 1: words that create pressure
| Word | Meaning | Why it matters |
|---|---|---|
| Urgent | Needs immediate attention. | Scammers can use false deadlines to prevent independent checks. |
| Suspended | Temporarily stopped or restricted. | A threat about an account may trigger panic. |
| Expired | No longer valid after a stated time. | An invented expiry can pressure you to click. |
| Penalty | A consequence or charge for breaking a rule. | Ask which official rule and verified organisation applies. |
| Final notice | A claimed last warning. | Its official-looking tone is not proof of authenticity. |
| Mandatory | Required under an applicable rule. | A fraudulent message may falsely claim something is compulsory. |
| Confidential | Intended to be private. | A demand for secrecy can isolate the recipient from advice. |
Group 2: words that encourage a transaction
| Word | Meaning | What to check |
|---|---|---|
| Verify | Check whether information is true or valid. | Does the request actually lead to an independent check, or merely a fake login page? |
| Authorise | Give permission for an action. | Never approve an unknown payment or sign-in prompt. |
| Transfer | Move money to another account. | A request to transfer funds to protect them is a major warning sign. |
| Refund | Money returned after a payment or charge. | A real refund should be confirmed through the merchant or official channel. |
| Deposit | Money paid or held under specific conditions. | An unexpected ‘deposit to unlock’ offer is suspicious. |
| Processing fee | A charge connected with processing a service. | Ask if the fee is legitimate and disclosed through verified channels. |
| Release | Make funds, a parcel or a benefit available. | Be cautious when a message demands payment to ‘release’ something unexpectedly. |
Group 3: words that reveal digital risk
| Word | Meaning | Why it matters |
|---|---|---|
| Link / URL | The address of a web resource. | A link can take you to a counterfeit site. |
| Domain | A named internet address under a particular registration. | A familiar word in a longer deceptive domain does not make the site official. |
| Attachment | A file sent with a message. | Unexpected files may contain harmful software. |
| Installation | Adding an app or software to a device. | Never install a third-party app on a stranger’s instruction. |
| Remote access | Ability to control or view another device from elsewhere. | Do not give an unknown caller control of your phone or computer. |
| Authentication | Process for checking access or identity. | Credentials and security codes must remain protected. |
Read the verbs: the action requested is often more important than the greeting
Compare these invented messages: “Your parcel is waiting” and “Your parcel is waiting; click this link and enter your card number to prevent return.” The first sentence is a status claim. The second demands an action that exposes payment information. A reader who notices click, enter, pay and prevent return can identify the pressure mechanism without needing to recognise every brand logo.
Three suspicious-message reading exercises
Scenario 1: a fake courier delivery message
Fictional message: “Delivery failed. A small rescheduling fee is required. Pay within 30 minutes using the link provided.” The message combines a plausible inconvenience (delivery failed), a cost (fee), a deadline (within 30 minutes) and a hazardous instruction (use the link). The better response is to open the courier’s official app or website independently and check the tracking record. ScamShield issued an October 2026 alert about fake courier messages designed to steal users’ personal and payment details.
Scenario 2: a supposed bank security warning
Fictional message: “Unusual transaction detected. Your account will be frozen unless you verify your identity using this page now.” The strongest pressure words are unusual, frozen, unless and now. A legitimate financial institution may indeed notify users of suspicious activity, but that does not mean this particular message is genuine. Open your trusted banking app independently or contact the bank using its official number. Do not use the suspicious message’s supplied link.
Scenario 3: a supposed easy job offer
Fictional message: “Earn S$500 a day by rating products. Deposit S$100 into your work account to unlock the next task.” The phrases earn, deposit and unlock reveal an arrangement where the applicant is expected to pay to continue. The job claim and promised earnings need independent verification. Do not send money or provide identity and bank details simply because a message appears to offer employment.
How to check a suspicious message without trusting its sender
- Pause. Do not click a link, scan a QR code, open an attachment or reply with passwords or OTPs.
- Identify the claim. Who does the sender say they are? What problem or reward do they describe?
- Identify the demand. Is the message asking for a transfer, login, installation, security code or confidential information?
- Verify independently. Use the organisation’s known app, official website entered directly or a trusted number—not contact details supplied in the suspicious message.
- Check through ScamShield. In Singapore, use the official ScamShield app or call 1799 if you are unsure.
- Document carefully. Preserve relevant messages and transaction information for reporting, without forwarding malicious links to others as recommendations.
- Escalate quickly when necessary. Contact your bank immediately for suspected account compromise or unauthorised transactions, and make an official report.
A warning about the padlock symbol and spelling
Older advice sometimes suggests that a web page with a padlock or “https” must be safe. That is incorrect. HTTPS indicates an encrypted connection, not that the organisation or offer is genuine. Scammers can use encrypted websites too. Likewise, a grammatically perfect message may still be fraudulent, and a legitimate message may contain an ordinary typo. Verification should rely on trustworthy independent channels, not on appearance alone.
A 10-minute vocabulary practice routine for everyday safety
| Minutes | Practice | Skill developed |
|---|---|---|
| 0–2 | Read a fictional suspicious message without following any links. | Separate the claimed story from evidence. |
| 2–4 | Underline the urgency words, threats and promised benefits. | Recognise pressure. |
| 4–6 | Circle action verbs: click, pay, transfer, install, verify or share. | Identify what you are being asked to do. |
| 6–8 | State two independent ways to check the claimed organisation. | Practise safer verification. |
| 8–10 | Explain your decision to someone else using five key terms. | Build confident recall. |
FAQ: phishing vocabulary and safer decisions
Is a message definitely genuine if it contains my full name?
No. Scammers may know or obtain personal information. Names, logos, real-looking numbers and correct spelling cannot establish identity on their own.
Does a warning message mean I must act immediately?
You should take possible account compromise seriously, but acting safely does not require trusting the link supplied by an unknown sender. Contact the organisation using its independently verified channel.
Can a website with HTTPS still be fake?
Yes. An encrypted connection does not prove that the business or page is genuine.
What if I already entered my banking details into a suspicious site?
Contact your bank immediately through its official hotline or app, follow its account-protection instructions, and report the suspected scam. If access credentials were exposed, follow the bank’s guidance for securing the account; do not share additional OTPs or approve unknown transactions.
Where do I get help in Singapore if I am unsure?
ScamShield provides a 24/7 helpline at 1799 for scam-related questions and guidance. Its official website also explains how to check messages and links.
Official sources and further reading
- ScamShield — Phishing Scams (official warning patterns and safer actions).
- ScamShield — Check for Scams (official app and helpline guidance).
- ScamShield — Fake Courier Text Alert, 31 October 2026 (recent example).
- eduKateSG — What Is Phishing? (how phishing works).
- eduKateSG — How a Fake Parcel Delivery Text Works (a focused scenario).
- eduKateSG — Getting Help in Singapore After a Scam (response and reporting).
- eduKateSG — Top 20 Vocabulary Words for Cybersecurity (core terms).
Next useful step: The next time you receive an unexpected message, name the sender’s claim, identify the pressure phrase and state the action being requested. Verify through an independent official channel before responding. That is how scam vocabulary becomes a protective life skill.