Everything you need to stay safe, confident, and connected β in simple, clear language
π‘ Golden Rule: When in doubt β STOP. Hang up, don't click, and call someone you trust.
Click any section to jump directly to it.
Updates fix security holes that criminals use to break into your device. Think of it like locking a door that was left open.
Set your device to update automatically so you never have to remember!
Weak passwords are like a lock made of cardboard. Criminals can crack common passwords in seconds.
Consider a password manager like LastPass or the built-in one on your iPhone (iCloud Keychain) to remember all your passwords safely.
Two-step verification means that even if someone steals your password, they still can't get into your account because they'd also need your phone.
When enabled, every time you log in from a new device, the website texts you a 6-digit code. You must enter that code to get in.
A "backup" is a copy of your photos and files saved in a second, safe place. If your phone breaks, gets lost, or is stolen, you won't lose your memories.
Before entering your credit card, Social Security number, or password on ANY website, look at the address bar at the top of your browser.
π https://www.yourbank.com β Has a padlock icon AND starts with "https" (the "s" means secure)
http://www.yourbank.com β No padlock, no "s" after "http" β DO NOT enter personal info here
Free WiFi at coffee shops, restaurants, airports, and libraries can be monitored by criminals sitting nearby. They can see what websites you visit and sometimes steal passwords.
For banking and shopping, wait until you're home on your own password-protected network, or use your phone's cellular data (not WiFi).
Many scams start with one click on a suspicious link. Before clicking any link in an email, text message, or on a website, take 5 seconds to check it.
Hover your mouse over the link (don't click!) and look at the bottom left of your screen. The real web address will appear. If it looks strange or different from the sender, don't click it.
Rule: Government websites always end in .gov. Fake ones don't.
A person calls claiming to be from the IRS, Social Security Administration, or Medicare saying you owe money or your benefits will be cut off unless you pay immediately.
Hang up immediately. If worried, call the IRS directly: 1-800-829-1040 or Social Security: 1-800-772-1213
You get a phone call or a scary pop-up on your computer saying your computer is infected with a virus. They offer to "fix" it if you give them access or pay a fee.
Close the pop-up or hang up. If your computer seems slow or odd, take it to a local trusted repair shop or call Apple Support directly at 1-800-275-2273.
Someone calls claiming to be your grandchild (or a lawyer/officer on their behalf) saying they've been in an accident, arrested, or are in trouble and need money wired immediately. They beg you not to tell anyone.
Hang up and call your family member directly using a phone number you already have (not the one they gave you). Verify before doing anything.
You meet someone online (Facebook, a dating app, even email) who seems wonderful and attentive. After weeks of building trust, they have a sudden "emergency" and need money.
Never send money to someone you've never met in person β no matter how much you trust them online. This is always a scam.
You get a call, letter, or email saying you've won a prize β but you must pay "taxes" or "processing fees" to receive it.
If you have to pay to get a prize, it's not a prize β it's a scam.
Whenever you receive an unexpected call or email asking for action, ask these questions. Legitimate organizations will welcome your caution. Scammers will pressure, threaten, or hang up.
Write these questions down and keep them near your phone. Take your time β no legitimate caller will rush you.
1. "What is your full name and employee ID number?"
Why: Legitimate employees will have this information. Scammers often stumble or give vague answers.
2. "What organization are you calling from, and what is your official website?"
Why: Write it down. Then look it up yourself on Google β don't trust what they tell you.
3. "Can you send me this information in writing by mail or official email?"
Why: Scammers want to act fast. Real companies are happy to put things in writing.
4. "Why do you need this information right now? What happens if I wait until tomorrow?"
Why: Artificial urgency is a scammer's most powerful tool. Real emergencies can usually wait an hour.
5. "Can I call you back at the number listed on your official website?"
Why: Real organizations will say yes. Scammers will say no, give you a different number, or pressure you to stay on the line.
6. "Why can't I use a check or credit card β why are you asking for gift cards or wire transfers?"
Why: No legitimate business or government agency accepts gift cards. Ever. This is always a scam.
7. "I'd like to call my son/daughter/trusted friend before I do anything. Is that okay?"
Why: Real callers will say "of course." Scammers will say no and try to keep you isolated.
1. "Did I sign up for anything from this company?"
Why: If you didn't sign up or have no account with them, the email is almost certainly spam or a scam.
2. "Does the email address actually match the company name?"
Example: A real PayPal email comes from @paypal.com β not @paypal-support.net or @notify-paypal.com
3. "Is this email threatening, creating panic, or asking me to act immediately?"
Why: "Your account will be deleted in 24 hours" or "Suspicious activity detected β verify now" are fear tactics.
4. "Does the email have spelling errors, odd phrasing, or look different than usual?"
Why: Many scam emails come from other countries and contain grammatical mistakes. Logos may look slightly "off."
5. "Is there an attachment I wasn't expecting?"
Why: Never open attachments from people you don't know. They can install viruses on your computer automatically.
Modern technology makes it easy for criminals to fake almost anything β a phone number, a voice, even a video. This is NOT science fiction β it happens every day.
What it is: Scammers can make your caller ID display ANY phone number they want β including your bank's real number, the IRS, Social Security, or even your neighbor's number.
Real example: Your phone shows "BANK OF AMERICA β 1-800-432-1000" but it's actually a scammer calling from overseas.
What it is: With just a few seconds of someone's voice (from a social media video or voicemail), artificial intelligence can now create a fake audio recording that sounds exactly like that person.
Real example: You get a call that sounds exactly like your grandson saying he's been in an accident and needs money immediately. But it's a computer-generated voice made by criminals.
What it is: Criminals create websites that look identical to real bank, government, or store websites β same logos, same colors, same layout. But they're fake traps designed to steal your info.
What it is: Called "phishing," scammers send emails with real company logos and official-looking formatting to trick you into clicking a link or giving personal information.
Real example: An email appearing to be from Amazon says "Your package cannot be delivered β verify your address and payment info now." The link goes to a fake site.
Never click links in emails from companies. Instead, open a new browser tab and type the company's address yourself to check your account directly.
What it is: AI technology can create realistic videos of people saying things they never said. This has been used to fake celebrity endorsements, news reports, and family member emergencies.
Example: A video appears to show a famous person promoting a "once-in-a-lifetime investment." It looks and sounds completely real. But it's entirely computer-generated.
The "display name" (what shows in bold) can say anything β like "Amazon Customer Service." But the actual email address tells the real story.
On most email apps, tap or click on the sender's name to see the full email address.
If an email says there's a problem with your account (Amazon, bank, PayPal, etc.), do not click any link in the email.
If you do this and there's no problem with your account, the email was a scam.
PayPal is a safe way to pay online because you never give the store your actual credit card number. Learn more at paypal.com
All government websites end in .gov. If it doesn't say .gov, it is not a real government website.
Roku is a small device that plugs into your TV and lets you watch streaming channels like Netflix, YouTube, Amazon Prime, and hundreds of free channels.
These smart speakers let you ask questions, play music, set reminders, and control smart home devices with your voice.
Your WiFi router is the device (usually with blinking lights) that connects everything in your home to the internet. Securing it is very important.
If you're ever unsure about a call, email, or situation, contact these official numbers and websites directly. Always look up numbers yourself β do not use a number given to you by a suspicious caller.
If you hear any of these phrases, consider it a major warning sign. Hang up or close the email immediately.
Urgency is a scammer's biggest weapon. Real companies give you days or weeks to respond, not minutes.
NO legitimate business, government agency, or utility company accepts gift cards as payment. EVER. This is 100% a scam.
Isolation is a scammer's key tactic. Any caller who asks you to keep secrets from family is a criminal.
Never allow remote access to your computer to someone who called you. They will steal your files, passwords, and possibly your money.
Real prizes are free. The "fee" is the scam. You will never receive the prize.
Social Security numbers cannot be suspended. This is a common scam targeting seniors. Hang up immediately.
Microsoft and Apple never proactively call you. Any pop-up with a phone number is fake. Close it without calling.
Wired money is nearly impossible to recover. Take time to verify any "emergency" by calling family directly.
Your bank or company already has your account details. They will never ask you to "confirm" them through an email link or call.
Stop
When something feels wrong, pause before acting
Think
Ask the verification questions before responding
Verify
Call the organization using a number you find yourself
Talk
Always ask a trusted family member or friend first
Never Gift Cards
No real organization ever asks for gift card payment
You deserve to feel safe and confident online. You've got this! πͺ
This guide is for educational purposes. Last updated March 2026. Share with family and friends!
For the most current scam alerts, visit consumer.ftc.gov/scams