Why Going Digital Means Getting Scammed: The Human Cost of Convenience

Last week, I got a text message claiming to be from my bank. The number looked almost right. The message was urgent—something about suspicious activity. For a split second, my heart jumped. I almost clicked the link.

I didn’t, because I work in digital design and I’m hyperaware of these tactics. But what about everyone else? What about my mum, or your neighbour, or the millions of people who just want to access their bank account without becoming a target?

Here’s the thing nobody talks about enough: when organizations go digital-only, they’re not just making a business decision. They’re fundamentally changing the security equation for regular people. And scammers are already one step ahead.

The Double-Edged Sword of Digital-Only Systems

Large organizations are moving to digital-only operations for reasons that make perfect sense from a business standpoint. It’s cheaper to maintain. It’s faster. It scales beautifully. No queues. No paper. No regional offices to staff.

But here’s what happens in the real world: when football clubs, banks, and government services go digital-only, they create a single point of failure for the people using them. Everyone’s funneled into the same digital channel. Everyone’s vulnerable to the same attacks.

I watched a major sports organization announce they were phasing out in-person ticketing entirely. Great for efficiency. Terrible for anyone who doesn’t have reliable internet, isn’t comfortable with apps, or has been targeted before by digital scams. Suddenly, a significant portion of their audience is either locked out or made incredibly anxious about being scammed.

The irony? Digital-only systems are supposed to be more secure. No physical documents to steal. Encrypted data. Two-factor authentication. On paper, it’s bulletproof. In practice, humans are the weak link—and scammers know it.

Why Scammers Love Digital-Only

When everything moves online, scammers get better tools. They can send thousands of phishing messages. They can clone websites. They can create fake apps that look identical to the real thing. The barrier to entry is incredibly low.

What’s worse is the psychological shift. When you’re used to going into a building and talking to a real person, you develop an instinctive sense of trust. Digital interactions strip that away. You’re left with a screen, some text, and a gut feeling about whether this is real.

I’ve designed enough authentication flows to know this problem intimately. How do you make people feel secure when they can’t see or touch anything? How do you build trust in a system that’s been compromised a thousand times before?

The answer is: you have to design for it deliberately. Most organizations don’t. They slap on a password field and call it a day.

What Actually Happens to People

Let me be concrete about this, because statistics are abstract but stories are real.

Sarah—a real person I know—tried to update her payment details with her insurance company online. She got an email asking her to verify her account. It looked perfect. Logo in the right place. Familiar language. She clicked. She entered her details. Later that week, her account was emptied.

Marcus, who’s 67, wanted to buy tickets to a match. He tried the official website, but it kept timing out. He found what looked like an official reseller. He paid £200. He never got the tickets. When he tried to claim them, he realized he’d been on a fake site the whole time.

These aren’t edge cases. These are the inevitable consequences of moving critical services online without thinking about human psychology, trust, and the real vulnerabilities that exist in digital systems.

As designers and product thinkers, we have a responsibility here. When we recommend going digital-only, we’re not just making things more efficient. We’re changing the attack surface. We’re shifting risk from the organization to the user.

The Path Forward Isn’t Digital-Only

I’m not arguing against digital services. They’re essential. They work. But digital-only is a choice, not an inevitability. And it’s a choice that has real consequences for the people on the other end.

Better design means offering alternatives. A phone line for people who need it. An in-person option for critical transactions. Clear, honest communication about security. Authentication methods that actually work for ordinary people, not just tech-savvy ones.

It means investing in user education—real education, not a disclaimer buried in the terms of service. It means designing security features that feel intuitive instead of like obstacles.

Most importantly, it means remembering that behind every user is a person who deserves to feel safe. Someone who’s probably already anxious about being scammed. Someone who might be less familiar with digital systems than you are.

Going digital can be brilliant. But going digital-only, without considering the human impact? That’s when scammers win. And real people lose.

Source: Bayern Munich CEO Jan-Christian Dreesen explains rationale for digital only…