Hurricanes, tornadoes and floods bring out the best in people—and the worst in scammers. Within hours of a disaster, fake charity emails, texts and social posts start circulating. Before you donate, verify the charity yourself. Give directly to organizations you already know and trust.
The scale of online fraud explains why you should pause. The FBI’s 2025 Internet Crime Report logged 1,008,597 complaints and nearly $21 billion in reported losses, with phishing and spoofing among the most frequently reported crimes. Scammers use the same playbook after a disaster, aiming it at your generosity.
How do natural disaster charity scams work?
Scammers follow the news. After a storm, they register lookalike charity names, send mass emails and post fake fundraisers. Some pose as government officials or relief workers. Others claim to attach photos of the damage. Those attachments can hide viruses, and the donation links can steal your card details or passwords.
What are the warning signs of a fake disaster charity?
- The request is unsolicited: You never contacted the sender, yet the message asks for money right now.
- The sender claims to be an official: Real agencies do not solicit donations by random email.
- The charity appeared overnight: A brand-new group with a name tied to the latest headline deserves extra scrutiny.
- The message pushes a link or attachment: “View the damage photos” or “Donate here” should make you stop.
- The payment method is unusual: Gift cards, wire transfers, cryptocurrency and payment apps are common scam requests.
- The appeal relies on pressure: Urgent language is designed to stop you from checking.
Is it safe to open email attachments claiming to show disaster photos?
No. Treat unexpected attachments as risky, even if the subject line sounds compassionate. Malicious files can install malware that steals passwords or monitors your device. Delete the message instead of opening it. If you want to see news coverage, visit a reputable news site yourself.
How can you donate safely after a hurricane, tornado or flood?
The FTC’s disaster-donation advice tells you to give to charities with a proven record, check them with watchdog groups and never click links or open attachments from unknown senders. Follow these steps:
- Ignore the unsolicited message. Do not reply, click, call the number or open attachments.
- Go to the charity directly. Type the organization’s web address yourself or use its official app.
- Check the charity’s record. Look it up on independent evaluators such as Charity Navigator or the BBB Wise Giving Alliance.
- Designate the disaster. Ask that your gift go to relief efforts for that specific event.
- Confirm text-to-donate numbers. Verify the short code on the charity’s official website before sending anything.
- Pay with a credit card. Card disputes are generally easier than recovering a wire transfer or gift card.
- Keep your receipt. Save confirmations for your records and monitor your statements.
What should you do if you already clicked or donated?
Act quickly. If you entered a password, change it on the real service and anywhere you reused it, then turn on multifactor authentication. If you shared card details, call your card issuer using the number on the card and ask about a dispute. Run a scan with trusted security software if you opened an attachment. Report the scam to the FTC at ReportFraud.ftc.gov so investigators can spot patterns.
Give with your heart—and verify with your head
Checking before you give keeps your money with the people who need it, keeps your passwords and card numbers out of criminals’ hands and builds a habit that helps you handle any suspicious request. Disaster scammers rely on speed and emotion; a 60-second verification takes both away. The next time a heartbreaking appeal lands in your inbox, delete it, find the charity independently and give with confidence. Then share these steps with a friend or family member who donates online.
