Spotting Scams
Learn the common red flags and how to pause before you pay, click, or share.
Scammers change tactics. Your defenses shouldn’t be complicated. CyberLawHub turns complex cyber rules into easy, step-by-step guidance designed for older adults and their families.
Explore ResourcesShort, plain-English guides you can read in a few minutes. Each topic opens a detailed explanation with safe next steps.
Learn the common red flags and how to pause before you pay, click, or share.
Simple steps to secure email, banking, and social media with strong layers.
Updates, backups, Wi-Fi safety, and safer browsing — explained clearly.
Who to contact first, what to collect, and how to create a paper trail.
CyberLawHub exists to make online safety practical for older adults. We translate complex cyber rules and legal “what to do if…” steps into calm, repeatable checklists. Our content is written in plain English, reviewed for clarity, and designed with large type, high contrast, and simple actions you can complete without a tech background.
We focus on measures that work even when scammers change tactics: pausing before paying, verifying through trusted phone numbers, using multi-factor authentication, and keeping a written record of contacts. We do not sell ads or collect sensitive personal data. Our guides emphasize government and bank processes that create documentation and protect your rights.
Questions or suggestions? Send a message. Please do not include account numbers or sensitive information.
Spotting Scams: Scammers rely on three things: urgency, secrecy, and unusual payment methods. If a message says your account will be closed in minutes, insists you act “quietly,” or asks for payment by gift card, wire, crypto, or a QR code, treat it as a scam until you prove otherwise. Caller ID, email names, and logos can be faked. Instead of clicking links or calling numbers in a message, pause and use contact information from your card, bill, or the company’s official website you type yourself. Watch for grammar mistakes, requests for remote access, or deals that seem too good to be true. Never read verification codes aloud—those protect your own sign-ins. If you feel pressured, it’s designed that way: hang up, breathe, and verify with a trusted friend or family member. Keep screenshots and notes about dates, amounts, and who contacted you. When in doubt, do nothing until you’ve confirmed through a known, independent source.
Protecting Accounts: Think in layers. First, create strong, unique passwords—at least 12 characters—using a memorable phrase or a password manager if you’re comfortable. Never reuse the same password for email and banking. Second, turn on two-factor authentication (2FA) everywhere, choosing codes or an authenticator app over text when possible. Third, add recovery phone numbers and emails you control, and store backup codes in a safe place. Review your bank’s alerts so you get a text or email for large or unusual charges. On phones, set a device PIN that isn’t a birth year, and enable screen-lock auto-timeout. Ask your mobile carrier about port-out protections so thieves can’t steal your number. Periodically review connected devices and sessions inside each account’s security settings and sign out of anything you don’t recognize. If a login email surprises you, change the password immediately and check recent activity. Strong habits here protect everything else you do online.
Cybersecurity Basics: Keep your devices updated—turn on automatic updates for your computer, phone, and apps. Updates fix holes scammers exploit. Back up important files regularly following the “3-2-1 rule”: three copies, on two different types of storage, with one copy kept offline or in a trusted cloud. Secure your home Wi-Fi: change the default router password, use WPA2 or WPA3 security, and avoid sharing the Wi-Fi password widely. In your browser, look for “https” and a lock icon before entering sensitive information; close sites that show warnings. Only install apps from official stores, and be wary of free “system cleaners” or “speed boosters.” Disable browser pop-ups that claim you have a virus; those are scare tactics. When traveling, avoid banking on public Wi-Fi. Finally, slow down payments: treat gift cards, cryptocurrency, and wires like cash—hard to reverse once sent. These basics, done consistently, prevent most common problems.
Where to Report Fraud: If you sent money or shared sensitive information, act quickly and create a paper trail. Start with your bank or card issuer to dispute or stop a payment. Ask for a new card and written confirmation. Next, report to the Federal Trade Commission (reportfraud.ftc.gov) and the FBI Internet Crime Complaint Center (ic3.gov). Include names, phone numbers, email addresses, websites, amounts, dates, and screenshots. If your identity may be at risk, consider a free fraud alert or credit freeze with the major bureaus. Keep a folder of all case numbers and letters. For social media or marketplace scams, report inside the app so the post or account can be removed. You can also contact your state attorney general’s office. If you need support or coaching, the AARP Fraud Watch Network offers guidance for older adults. Reporting helps you and also helps others avoid the same scheme.