Protecting Yourself Online
A message about a delivery, a bank account, or a bill can look convincing, especially when it asks you to act right away. You do not have to decide whether it is real while you are reading it. Pause, then check through a route you already know. That one habit can prevent many online scams.
Pause when a message creates urgency
Be wary of an unexpected text, email, call, or social media message that says your account will be closed, your payment has failed, or your money is at risk. A familiar logo or a name you recognize does not prove who sent it. If someone asks you to keep the conversation secret, stop and check separately.
Common scams and how to double-check
What you might see |
How to double-check |
|---|---|
A delivery or toll text asks you to pay a small fee |
Open the carrier’s app or the toll agency’s website yourself. Check for an actual delivery or balance there. |
A bank alert says there is fraud on your account |
Open your banking app or call the number on the back of your card. Do not read a sign-in code to the caller. |
A pop-up says your computer has a virus and gives you a number to call |
Close the pop-up. Check your device through its own security settings or ask someone you trust for help. |
A relative appears to call or message with an urgent request for money |
Call them on a number you already have, or speak to another family member. A familiar voice can be faked. |
Someone claiming to be from Medicare or a government agency asks for your details |
Find the agency’s official number independently and call it. Do not share your Medicare number or banking details with the person who contacted you. |
Protect the accounts that matter most
Start with your email, banking, and health accounts. Use a different, strong password for each; a password manager can help you keep track of them. Turn on two-step verification when it is available. This may ask for a code, an app approval, or a fingerprint as an extra check when you sign in.
Keep your devices up to date
Set your phone, computer, browser, and apps to install updates automatically if you can. Use a screen lock so someone else cannot open your accounts if a device is lost. If you are unsure how to change these settings, ask a trusted person to show you, then write down where to find them again.
Act quickly if you shared information
If you entered a password on a suspicious site, go to the real account and change it. If you shared payment information or sent money, contact your bank or card company using its official number. If a link downloaded a file, update your security software and run a scan. Report the message to the Federal Trade Commission. AARP’s Fraud Watch Network can also help you work out what to do next.
Never…
- Never give a password or one-time verification code to someone who contacted you, even if they say they work for your bank.
- Never move money to a “safe” account or pay with gift cards or cryptocurrency because of an unexpected call or message.
- Never give a caller or pop-up remote access to your phone or computer.
- Never use the link or phone number in a suspicious message to check whether the message is real.
Questions to ask before you respond
- Was I expecting this message or call?
- Is it pushing me to act immediately or keep it secret?
- Can I check the claim in an app or through a number I already trust?
- Would it help to ask someone I trust to look at it with me?
You do not need to spot every fake message at a glance. Make a habit of checking outside the message before you click, call, or pay.
Useful Resources
- How to Recognize and Avoid Phishing Scams – Federal Trade Commission
- Secure Our World – Cybersecurity and Infrastructure Security Agency
- AARP Fraud Watch Network – AARP
- IdentityTheft.gov – Federal Trade Commission