cyberhygiene.tools adults logo
FOR ADULTS & SENIORS

10 Simple Tips for Staying Safe Online

No jargon, no scare tactics — just plain-English advice to help you spot scams, phishing texts, and fake phone calls before they cost you anything.

Free to read — nothing you enter here is ever saved or sent anywhere
1

Guard your PIN and passwords

No bank, government department, or courier service will ever ask for your PIN or password over the phone or in a text message. If someone does, it's a scam — every time.

2

Slow down when something feels urgent

Scams work by creating panic so you act before you think. A real problem will still be a problem in ten minutes — take your time and check first.

3

Hang up and call back on a number you find yourself

If someone rings claiming to be from your bank or phone provider, hang up and call the number on your card, a past bill, or the official website — not a number they give you.

4

Don't trust caller ID or sender names

These can be faked to look like your bank or a family member. Just because a call or text looks official doesn't mean it is.

5

Check with someone before sending money

Talk to a family member or friend before paying or transferring money to someone you haven't met in person. A second opinion can catch a scam before it costs you.

6

Use a different password for each important account

Especially banking and email — so if one password is stolen, it doesn't open everything else. Our free Passphrase Generator can help you create one that's easy to remember.

7

Be mindful of what you post publicly

Holiday dates, daily routines, or personal details on Facebook can be used by scammers to build fake trust or work out when your house is empty.

8

Be suspicious of anything free, urgent, or too good to be true

Prize wins, unexpected tax refunds, or investment tips out of the blue are classic scam lines. If it sounds too good to be true, it is.

9

Report anything suspicious

Report anything suspicious using your country's scam-reporting contacts below — it's free, confidential, and helps protect others too.

10

Trust your gut — hanging up is always okay

You're allowed to say no, hang up, or delete a message. A genuine caller or organisation will never be upset that you double-checked first.

Showing help for:

Why we made this page

Scams targeting adults and seniors keep getting more convincing — fake bank calls, courier text scams, and investment schemes cost people millions of dollars every year. This page is here to help, in plain language, with no jargon and no judgement. If you'd like more tools, try our free Password Strength Checker or share our Kids with the grandchildren.

The scams costing people the most right now

The scams that lose people the most money are not the obvious ones. They are patient, well-researched impersonations that arrive at a plausible moment and ask for something that sounds reasonable.

Bank and authority impersonation

A call, apparently from your bank's real number — caller ID is trivial to falsify — warning of fraud on your account. You are asked to move money to a "safe account", to read out a code, or to install software so they can help. All three are the fraud. No bank has a safe account. No bank asks for codes. No bank needs remote access to your computer. Hang up and call the number on the back of your card, from a different phone if you can.

Invoice and payment redirection

An email arrives, in an existing thread, saying bank details have changed. It often comes from a real compromised mailbox, so there is nothing technically suspicious about it. The defence is process: verify every change of payment details by phoning a number you already had, never one from the email. This one rule prevents most of these losses.

The cloned voice emergency

A distressed call from a family member's voice, needing money urgently, with instructions not to tell anyone else. The voice can be cloned from a short social media clip. Hang up and call them back on the number already in your phone, and agree a family check word before you ever need it.

Investment and cryptocurrency fraud

Often introduced through a relationship built over weeks, on a platform that shows convincing growing returns. Withdrawals are blocked by fees and taxes that never end. Guaranteed returns do not exist, pressure to act quickly is a warning sign, and any platform found through a message rather than a regulator's register should be treated as fictional.

Tech support

A pop-up, a call, or a search advert claiming your computer is infected. The aim is remote access, from which they take passwords, empty accounts, and sometimes stage fake refunds that convince you to send money back. No legitimate company monitors your computer and phones you about it.

The rule that covers all of them

Verify through a channel you chose, not the one that contacted you. Hang up and dial the number on your card. Open the bank's app rather than the link. Ring your son on the number in your contacts. Type the company's address yourself.

This works because it does not require you to spot anything. It does not matter how professional the caller sounds, how accurate the voice is, or what number appears on your screen. If verification runs through a channel the fraudster does not control, the attack fails.

Expect pressure when you do it. Urgency, secrecy, and warnings not to hang up are not incidental to these scams — they are the mechanism. Treat them as confirmation rather than as reasons to comply.

Practical steps worth doing this month

  1. Turn on two-factor authentication for your email account. It can reset most of your other accounts, so it matters more than any single one of them.
  2. Make your email and banking passwords unique, and long. Our passphrase generator gives you something memorable.
  3. Turn on automatic updates for your phone and computer.
  4. Agree a family check word with your children, parents and partner.
  5. Ask your mobile provider for a port-out PIN, which makes SIM swapping harder.
  6. Set up transaction alerts with your bank so unexpected payments are visible immediately.
  7. Know where you would report fraud before you need to — our reporting page lists the agency for your country.

Helping an older relative without patronising them

Frame it as something everybody is dealing with, because it is. "These calls have got so good that we've all agreed a word in our family" works far better than advice that implies they are an easy target. Most older people are not naive; they are being targeted by professionals using techniques designed to defeat anyone.

Make sure they know that hanging up is always acceptable, that no legitimate organisation will be offended, and that calling you to check is never a nuisance. Then answer when they call. The people who lose money are very often the ones who felt they had nobody to ask.


Frequently asked questions

Will my bank ever ask me to move money to a safe account?

No. There is no such thing. Any call, text or email asking you to transfer money to protect it is fraud, without exception. Hang up and call the number on the back of your card.

The call came from my bank's real number. Doesn't that prove it?

No. Caller ID is easily falsified, and fraudsters routinely display the genuine number of the organisation they are impersonating. Always hang up and call back on a number you look up yourself.

What is the safest way to check whether a message is genuine?

Contact the organisation through a channel you chose — their app, their published phone number, or by typing their address yourself. Never use contact details supplied in the message.

How do I protect an elderly parent without upsetting them?

Present it as a family-wide arrangement rather than advice aimed at them, give a concrete example of the scam, and agree a check word together. Make clear that calling you to check something is never a bother.

Should I stop answering unknown numbers?

You do not have to, but you should never act on an unexpected call that creates urgency. Take the information, end the call, and verify independently before doing anything with money or codes.