Small skills that make the phone work for you — one at a time, no rush.
For email, banking and health portals, use a different long password or passphrase for each account. A password manager can help you store them. If you prefer a paper record, keep it securely at home, not beside your computer.
Open your account’s Settings → Security and enable multifactor authentication (MFA). An authenticator app or passkey is a good choice when available. Never read a verification code to an unexpected caller.
On an iPhone, open Settings → General → Software Update. On Android, look for Settings → System → Software update (names vary). Install updates from the device’s settings, not from a pop-up ad.
To reach Medicare, your bank or a healthcare portal, use a saved bookmark, the official app or a web address you type yourself. Avoid links in unexpected texts, even when the logo looks familiar.
Use your home Wi-Fi or cellular connection for sensitive tasks when possible. On shared devices, sign out when finished. Avoid entering passwords on someone else’s computer.
Check the full address or phone number. Even a familiar sender name can be spoofed.
Be cautious about requests for passwords, one-time codes, remote computer access or urgent transfers.
Close the message. Open the official app or call a number on your card or statement.
Message: “USPS: Your package cannot be delivered. Update your address and pay a small redelivery fee here.”
Best next step: Do not use the link. If you expect a package, open the USPS website or app independently and enter your tracking number there.
Message: “This is tech support. Your laptop has a virus. Call this number now.”
Best next step: Do not call the pop-up number or grant remote access. Close the tab or browser and use trusted support if you still have concerns.
Useful official resources: FTC Consumer Advice · CISA Secure Our World · AARP Fraud Watch Network.
Do not click, pay, share a code or give remote access to your device.
Hang up. Call the bank, relative or agency using a number you already trust—not the one in the message.
Contact your bank promptly if you paid or shared account details, and report the attempt to the FTC.
“Your toll payment failed. Pay $4.95 within 30 minutes or your license will be suspended. Tap here: toll-fast-pay.example”
Red flags: sudden deadline, unfamiliar link, pressure to pay.“Grandma, I'm in trouble. Don't tell Mom. Send $2,000 right now through a payment app.”
Red flags: secrecy, urgency, impersonation. Call your family member using their saved number.Read each message and choose what you would do. There are no real links here — this is a safe place to practice.
USPS: Your package cannot be delivered. Pay a $1.99 redelivery fee within 12 hours or it will be returned. Pay here: usps-redelivery-help.com
The post office does not ask for payment by text message. An urgent deadline and an unfamiliar web address are classic pressure tricks. If you are expecting a package, check the real USPS website or app yourself — never through a link in a text.
Hi Grandma, it's me. I'm in trouble and need help fast. Please buy $500 in gift cards and text me the numbers. Don't tell Mom yet.
Gift cards are a favorite payment method for scammers because the money cannot be traced or returned — and "don't tell anyone" is a warning sign by itself. Call your grandchild, or their parents, on a number you already have before doing anything.
Your prescription refill is ready for pickup at the store. Questions? Please call the number printed on your prescription bottle.
There is no link to tap and nothing is requested — no payment, no password, no personal information — and it points you to a number you already trust. If a message like this ever feels wrong, calling the store directly is always a safe move.
Finished all three? The rule that catches almost every scam is simple: stop, and check through a number or website you already trust.