Here’s how it works and how to avoid becoming a victim.