The postcard looks official. It says you qualify for extra monthly benefits through the "Veterans Savings Program," it mentions your state, and it name-drops real programs like CHAMPVA and TRICARE For Life. All you have to do is call.

On August 24 the FTC warned that these postcards are landing in veterans' mailboxes across the country, and there is no such program. Call the number and a scammer posing as the Department of Veterans Affairs pressures you to act fast or "risk losing out," then asks for your Social Security number or bank details. The real VA does not work this way, and it does not announce new benefits by postcard with a countdown clock.

The rule: If a postcard promises veterans extra money, don't call the number on it. Check with the VA directly at 1-800-827-1000, and report the scam at ReportFraud.ftc.gov or VSAFE.gov (1-833-38V-SAFE).

Source: FTC: How to spot a postcard scam targeting veterans

You search "pay my electric bill," click the first result, and pay. Done, right? Maybe not. That first result is often a paid ad, and it may not be your biller at all.

The FTC warned on August 17 that companies buy search ads designed to look like official payment pages. The same day, the FTC announced that bill payment firm Doxo will pay $2.1 million over allegations it posed as the official payment channel for companies like Labcorp and AT&T, tacked hidden "delivery fees" onto bills, and slipped people into subscriptions. According to the FTC, Doxo had no relationship with the overwhelming majority of the companies it listed. Pay through a middleman like that and you can owe extra fees, and your real bill can still land late.

The rule: Scroll past anything marked "Ad" or "Sponsored." Type your biller's web address yourself, straight from your paper bill or statement, and report imposters at ReportFraud.ftc.gov.

Sources: FTC: Searching online: bill pay impersonators and FTC: Bill Payment Firm Doxo to Pay $2.1 Million

You negotiated the price, you shook hands, and then the paperwork came back higher. Somewhere between the handshake and the signature, fees crept in.

On August 19 the FTC and Connecticut's attorney general announced a $4 million settlement with Manchester City Nissan. The dealership allegedly charged customers a second time to "certify" used cars it had already advertised as certified pre-owned, and slipped add-ons like total loss protection into financing paperwork without permission. The money will go back to affected customers. The playbook is not unique to one dealership: the fees hide in a stack of signature pages, and most buyers are too worn down to question line 14.

The rule: Before you sign anything, get the full "out the door" price in writing and read every line item. If a fee wasn't explained and agreed to, refuse it. Report junk fees at ReportFraud.ftc.gov and to your state attorney general.

Source: FTC, Connecticut Secure $4 Million Settlement with Manchester City Nissan Over Deceptive Fees Allegations

A package shows up with your name on it. Inside: seeds, baby wipes, a phone case, something cheap you never ordered. Free stuff? Not quite.

On August 20 the FTC explained the "brushing" scam behind these deliveries. A shady seller ships you a low-cost item so it can post glowing online reviews in your name, making its products look popular. The newer, nastier twist is the QR code tucked inside, offering to reveal who sent the package or help you "process a return." Scan it and it opens a fake login page built to steal your passwords and card numbers. One bright spot: by law, you can keep unordered merchandise. You owe nothing to anyone.

The rule: Never scan a QR code from a package you didn't order. Change the passwords on your shopping accounts, check your credit at AnnualCreditReport.com, and report it at ReportFraud.ftc.gov.

Source: FTC: That unexpected package you got could be a brushing scam