People all over the country are donating to Harvey disaster relief efforts, but law enforcement officials and consumer watchdogs urge caution: Beware of phony charities.

Scam artists use a host of tactics–bogus websites, emails, social media accounts and fake crowdfunding campaigns–to capitalize on Americans’ generosity after major crises.

Attorneys General in Colorado, Ohio and Arizona have already warned citizens about charity fraud following Harvey. “Low-life cyber scum are exploiting this disaster using fake social media accounts,” Arizona Attorney General Mark Brnovich said in a statement on Monday.

“There’s a cycle for disaster fraud,” explained Walt Green, who ran the Justice Department’s National Center for Disaster Fraud from 2013 to 2017.

Every spring, when the National Weather Service announces potential names for the upcoming hurricane season, scammers race to create deceptive websites and accounts soliciting donations using variations of those storm names.

“It’s unbelievable,” Green said.

After Hurricane Katrina struck in 2005, the FBI said more than 4,600 websites advertising relief efforts popped up, most of which law enforcement suspected were fraudulent. The Red Cross asked the FBI to investigate 15 sites that mirrored its own website in the days following Katrina.

One of the most brazen Katrina-related fraud cases Green recalled involved two men who registered a fake Salvation Army domain name — “salvationarmyonline.org” — and used it to collect nearly $50,000 in donations. Another man who claimed he was flying to Louisiana with medical supplies collected $40,000 in two days on “KatrinaAir.com,” according to a Justice Department spokesperson. He never arrived.

Are you considering a donation to a Harvey relief fund? Experts have some advice.

Steer clear of suspicious websites. Beware of unsolicited emails and phone calls. Never open emails purporting to show photos of disaster areas because they may be viruses hackers can use to steal your information.

And start by doing your homework on the organization.

“Be wary of charities that spring up too suddenly in response to current events and natural disasters,” the Federal Trade Commission website warns. The FTC also urges close vetting of solicitations posted on places like Facebook and Twitter.

Donate to national groups with a solid track record or familiar local organizations, advises Doug White, director of the Fundraising Management Graduate Program at Columbia University.

If you’re unsure about a charity’s history, the FTC has a handy list of sites to consult. Better Business Bureau’s Wise Giving Alliance, Charity Navigator, Charity Watch and GuideStar are among the leading charity watchdogs in the country.

The Justice Department suggests avoiding cash donations if possible. Pay by credit card or write a check directly to the charity. Don’t ever cut checks directly to individuals.

If you’re going to donate using a popular crowdfunding tool like GoFundMe, the group has set up a page dedicated to Harvey efforts. GoFundMe said it was coordinating with local and federal officials to prevent fraud.

And if you do think you’ve been targeted by a scammer, report it to the National Center for Disaster Fraud hotline (866-720-5721) or the Texas Attorney General’s hotline (800-621-0508). You can also alert the FBI’s Internet Crime Complaint Center (IC3).

For vetted ways to help hurricane victims, visit CNN Impact. We’re also on Facebook and Twitter.