An addendum is don't give money when you're called by a "legitimate contact", call them back first. The scammer is remote so they can pretend to be the "legitimate contact" but not so easy to block the real legitimate contact from being contacted for validation.