Being online makes it easier to stay close to family, manage appointments, pay bills, learn something new, and take part in community life. Those benefits are worth protecting. Online safety is not about being afraid of every message or avoiding useful tools. It is about building a few calm habits that give you time to check what is real before you act.

Scammers often want the same thing: a rushed decision. They may pretend to be a bank, a delivery company, a government office, a friend in trouble, or a technical support worker. Their message may look polished. The good news is that you do not need to become a technology expert to make safer choices. A short pause, a trusted second opinion, and a few account protections can stop many common scams before they go further.

Start with a safer everyday setup

Good online safety begins before a suspicious message arrives. Lock your phone, tablet, and computer with a passcode, fingerprint, or face recognition. This helps protect your information if a device is lost, borrowed, or left on a table. The Cybersecurity and Infrastructure Security Agency recommends keeping software up to date because updates fix known problems and strengthen a device’s protections.

Turn on automatic updates when you can. Your phone, browser, computer, and common apps will occasionally ask to update. A real update notice should come from the device or app itself, not from a surprise pop-up telling you to call a number. If you are unsure, close the pop-up and look for updates in your device settings or ask a trusted helper.

Keep a small paper record of the important people and organizations you may need to contact: your bank’s official phone number, your medical office, a family member, and a local technology resource. When something feels wrong, that list gives you a place to start without relying on a link or number a stranger sent.

Use a different password for every important account

Think of your email account as a key ring. It can often reset passwords for shopping, health, financial, and social accounts. That is why email deserves one long, unique password that you do not use anywhere else. Banking, payment, and medical accounts deserve the same treatment.

Long passwords are stronger than short, complicated ones that are hard to remember. A password manager can create and remember unique passwords for you, so you do not have to keep a notebook full of logins or reuse the same password on every site. If a password manager feels new, start with one account and ask someone patient to show you the steps. Small, repeatable practice is better than trying to change every account in one afternoon.

When available, turn on multi-factor authentication. This adds a second check, such as a code from an app or a confirmation on your phone. It can feel like one extra step, but it makes it much harder for someone to enter an account with only a stolen password. Never share a verification code with anyone who calls, texts, or emails you unexpectedly. A legitimate company will not need you to read that code to them.

Recognize the signs of a scam

Most scams use pressure. A message may say your account will be closed today, a package cannot be delivered, your computer has a virus, or a loved one needs money immediately. It may offer a prize that seems too good to be true. It may even appear to come from a familiar name. The Federal Trade Commission warns that scammers use phone calls, texts, email, social media, and websites, so the method matters less than the request.

Look for a reason to pause. Is the request unexpected? Does it demand payment by gift card, wire transfer, cryptocurrency, or a payment app? Does it tell you not to talk to family or your bank? Does it ask you to install remote-access software, move money to a “safe” account, or provide a password? Those are strong signs to stop and verify independently.

Do not judge a message only by spelling or a logo. Scammers can copy a company’s colors and write convincingly. Instead, avoid using the link, attachment, or phone number in the message. Open a fresh browser window and type the organization’s website yourself. Or call the number printed on the back of your card, on a recent statement, or in your saved contact list.

Handle suspicious emails, texts, and pop-ups safely

A suspicious email or text does not need a response. Do not reply, click its link, open an attachment, or call the number it provides. Mark it as spam or junk if your email or phone offers that option, then delete it. If it claims to be from a company you use, sign in by going to the company’s real website yourself. Check for a notice there rather than trusting the message.

Pop-ups that say your computer is infected can feel alarming, especially when they include a loud sound or a phone number. Close the browser window. Do not call the number and do not allow anyone who contacted you unexpectedly to control your device. Real technology companies do not normally call out of the blue to announce a computer problem. If the pop-up will not close, ask a trusted person or local support resource to help rather than following its instructions.

A quick check can also protect family relationships. If a text or social message says a grandchild, friend, or relative needs urgent money, contact that person through a number you already have. Do not use the number supplied in the message. A five-minute conversation is far safer than sending money under pressure.

Share less personal information in public

Personal details can help a scammer sound convincing. Before posting on social media, consider whether your birthday, address, travel plans, phone number, or a photo of a document could reveal more than you intended. Review privacy settings on social accounts and choose the smallest audience that makes sense for what you want to share.

The same care applies to online forms. A legitimate business may need your address to ship something, but a random quiz, advertisement, or unfamiliar website does not need every detail about you. When a site asks for sensitive information, ask why it needs it and whether you reached the site through a trusted path. It is always okay to close the page and come back later after you have checked.

Shop, bank, and use health portals with confidence

Online services can save time, and you do not have to avoid them to stay safe. Use a saved bookmark or type the address yourself for your bank, medical provider, or regular stores. Keep your browser and phone updated. Review account activity regularly, especially after making a purchase or receiving an unexpected alert.

On public Wi-Fi, such as a coffee shop or waiting room, avoid banking or entering highly sensitive information unless you are confident you are on the official network. If you need to complete an important task, it is often easier to wait until you are home or using a trusted connection. Sign out when you are finished on a shared device, and do not save passwords in a browser that other people use.

Have a simple plan when something feels wrong

If you clicked a link or shared information, do not feel embarrassed. Scams are designed to catch people in busy or stressful moments. Act quickly and keep the next step simple. Change the password for the account involved, especially if it is email. Contact your bank or card provider using a trusted number if money or financial information may be at risk. Save a screenshot or write down what happened, then tell someone you trust.

You can also report suspected fraud through the Federal Trade Commission’s fraud reporting site. Reporting helps the agency track patterns and warn others. The CISA online safety guide for older adults is another useful printable reference for device locks, updates, passwords, privacy settings, and cautious sharing.

Build confidence through small practice

Safety habits work best when they become familiar. Pick one change this week: turn on updates, create a stronger email password, review a privacy setting, or practice finding a company’s real website without using a search result. Then add the next habit when the first one feels comfortable.

It can help to practice a safety check before there is a real concern. Open a familiar company website from a saved bookmark, find its real customer-service number, and notice where account alerts appear after you sign in. That calm practice makes it easier to recognize the difference between an ordinary account message and a stranger trying to rush you. If you use a phone, practice blocking a spam caller or marking one suspicious text as junk.

Talk about scams with family, friends, and neighbors without blame. Sharing a suspicious message can protect someone else from the same trick. A simple agreement can help too: no one sends money, buys a gift card, shares a verification code, or installs remote-access software because of an unexpected message without checking with a trusted person first.

Urban Community Tech’s digital skills learning is built around useful, everyday tasks, not jargon or judgment. Our guides to digital literacy and basic computer skills can help you build a stronger foundation one step at a time. If your community group needs help making its accounts, files, or everyday tools easier to manage, explore our practical technology support or start a conversation.

Frequently asked questions

What should I do after clicking a suspicious link?

Do not enter any information. Close the page, then use a trusted device or a known website to change the password for the account involved. If money or personal information may be at risk, contact the bank, card company, or organization using a number you already know is real.

Should I use a password manager?

A password manager can make it much easier to use a long, different password for every account. Choose a reputable option and ask a trusted helper to walk through the first setup if that makes the process more comfortable.

How can I tell if a text or email is a scam?

Slow down when a message is unexpected, urgent, threatening, or asks for a code, payment, password, or personal details. Do not use the link or phone number in the message. Open the company’s official website yourself or call a number from a statement, card, or trusted contact list.

Where can I report a scam?

Suspected fraud can be reported through the Federal Trade Commission at ReportFraud.ftc.gov. If an account or payment card is involved, contact that provider as soon as possible as well.

Related posts