The scammer's calendar — and what to do in the first 24 hours if it happens anyway

Fraud has a season, and that season repeats every single year. Scammers work to a calendar the same way any other operation would, timing each script to a real institutional deadline or a real seasonal habit — which is exactly what makes the fake version convincing. Knowing the calendar in advance means you're not caught off guard by the seasonal spike; you already know which months call for more skepticism toward an unexpected call or text before it even arrives.

Fraud has a season. Knowing the season is most of the defense.

Three windows, every year

Mark these three windows on the calendar the household already uses. Each one is timed to match a real deadline or a real seasonal habit:

• January through April — fake IRS call season, timed to tax filing.
• October 15 through December 7 — fake Medicare call season, timed to open enrollment.
• November and December — a wave of fake delivery texts, timed to holiday shipping.

Marking these three windows turns a vague, general sense of caution into a specific one, tied to a specific stretch of months instead of a feeling that's supposed to hold up all year and quietly fades instead.

The tells

Once you know the season, the individual tells are easier to spot. There are four sentences no real bank employee has ever said:

• "Move your money."
• "Stay on the phone."
• "Don't tell your family."
• "Confirm your password."

Hearing any one of them is reason enough to hang up and call the number on your card instead.

Medicare calls deserve the same scrutiny. Medicare already has your information, so a call asking you to verify a number, or offering a new card, a DNA kit, or free braces, is itself the scam rather than a formality — the fix is to hang up and call Medicare back using the number printed on the card, never one a caller provides.

The gift card rack is another tell: instant and untraceable, and it doesn't feel like handing over cash, so nobody hesitates. The Bitcoin ATM works the same way a wire transfer does, only faster. And a blaring popup with a phone number is the scam itself, not a computer error — built to make you panic and call before you think.

Check washing at the blue mailbox

That blue mailbox on the corner carries a problem most people never think about: check washing. A stolen check gets the ink lifted out using household chemicals, which leaves the signature intact while the payee and the amount get rewritten. The fix is simple and doesn't require giving up paper checks entirely — hand checks directly to a carrier or drop them inside the post office instead of leaving them in a collection box, where they can sit for hours before pickup. It's a small change in habit that closes off an entire category of fraud that depends on the check sitting unattended somewhere accessible.

If it already happened

If money has already been sent, the first day has a specific order, and following it matters more than dwelling on how it happened:

1. Hour one — call the bank.
2. Hour two — change passwords.
3. By evening — report the incident.
4. The next day — freeze credit.

Speed matters more than shame in that first stretch — acting first and processing the rest afterward, which is why this order is worth saving somewhere before you ever need it, rather than trying to reconstruct it from memory under pressure in the moment it actually happens. None of these four steps requires first figuring out how the scam worked or who was behind it; that part can wait. The order exists precisely so a person in shock has something concrete to follow instead of a decision to build from scratch while still processing what just happened.