🛡️

Stay Safe Online

Your Quick Guide to Digital Defense

“Accidents are the result of a chain of circumstances that can be stopped at the beginning” –Ralph C. Richards

The internet is a necessity, but it can also be a minefield. Protecting your personal data and your computer comes down to recognizing a few common traps and knowing how to use the built-in tools you already own. Browse the seven topics below — click any card to jump straight to it.

Table of Contents

1 Topic 1 of 7

Spotting Scam Emails (Phishing)

Scammers use deceptive emails to steal passwords, credit card numbers, or trick you into installing malware. Thanks to modern AI tools, these emails often feature flawless grammar, making them harder to spot. Always look for these critical red flags:

The “Urgency” Trap

If the email screams “Your account will be locked in 24 hours!” or “Immediate action required on your tax return!”, it's likely a scam. They want you to panic and act before you think.

The Sender Address Check

The sender name might say “Your Bank,” but if you look closely at the actual email address, it might be something like support@bank-update-security-site.com instead of the official domain.

Mismatched Links

Move your mouse cursor over a link without clicking it. A small pop-up will show you the true web address. If the text says paypal.com but the preview points somewhere else, do not click it.

Odd Payment Requests

Legitimate businesses or government agencies will never ask you to pay via gift cards, wire transfers, or cryptocurrency.

2 Topic 2 of 7

Avoiding Malicious Ads (“Malvertising”)

Bad actors can buy ad space on legitimate search engines and popular websites. These ads are designed to look like real software downloads or urgent system alerts.

The Fake Download Button

When searching for free software (like media players or file extractors), malicious ads often feature giant, glowing “DOWNLOAD NOW” buttons designed to trick you into downloading malware instead of the actual program. Look for the small “Ad” label next to the link.

Fake Tech Support Pop-ups

If your screen suddenly locks up with a loud beeping noise and a flashing warning saying “YOUR COMPUTER IS INFECTED! Call Microsoft at 1-800-XXX-XXXX,” this is a fake ad. What to do: Do not call the number. Simply close your web browser. If the screen is frozen, press Ctrl + Shift + Esc to open the Task Manager, select your browser, and click End Task.

Use a reputable, trusted ad-blocker extension in your web browser to stop these malicious scripts from loading on your screen in the first place.
3 Topic 3 of 7

Securing Your Accounts (Passwords & 2FA)

A single leaked password can give hackers access to your entire digital life. Relying on your memory to create secure passwords usually leads to weak choices or risky recycling.

Ditch the Short Passwords

A password like P@ssword123! can be cracked by automated software in minutes. Instead, use a passphrase—four or five random words strung together (e.g., horse-staple-battery-cloud). It's incredibly hard for a computer to guess, but easy for you to visualize and remember.

Stop Reusing Passwords

If a random forum you signed up for in 2021 gets hacked, and you use that same password for your banking or email, hackers will immediately try to log into your sensitive accounts.

The Ultimate Shield (2FA)

Turn on Two-Factor Authentication (2FA) on your important accounts. This requires a second step—like a code sent to an authenticator app on your phone or via text—before letting anyone log in. Even if a scammer steals your password, they still can't get in without that second code.

Use a trusted, encrypted password manager to create, store, and automatically fill in strong, unique passwords for every site you visit.
4 Topic 4 of 7

Social Engineering & Oversharing

Not all hacking involves complex computer code. Often, scammers just use the information you freely post online to trick you, your family, or your friends.

The “Grandparent” or Emergency Scam

Scammers use social media to find out when someone is traveling. They will then call an older relative, pretending to be the grandchild, a police officer, or a medical professional, claiming: “I've been in a car accident / arrested in another country, and I need you to wire bail money immediately.” They often use AI voice-cloning technology to sound exactly like the family member.

Security Question Minefields

Those fun social media quizzes that ask for your first pet's name, the street you grew up on, or your mother’s maiden name aren't just innocent games. They are exactly the security recovery questions used by banks and email providers to reset passwords.

Locked-Down Privacy

Check the privacy settings on your social media accounts (Facebook, Instagram, etc.). Set them to “Friends Only” rather than “Public.” If your profile is completely public, anyone can see your birthday, where you work, who your family members are, and when you are away from home on vacation.

The “Friend” Request Duplicate

If you receive a friend request from someone you are already friends with, look closely. Scammers often clone real profiles (stealing their pictures and name) to message their friends list and send malicious links or ask for money. Always verify through a phone call or text before interacting with a duplicate profile.

5 Topic 5 of 7

Smart Software Management

Malware often sneaks onto computers because of outdated software or untrusted downloads. Keeping your digital house clean is one of the easiest ways to prevent infections.

Turn On Auto-Updates

Software developers constantly patch security holes that hackers use to break into systems. Set your operating system (Windows), web browsers, and critical apps to update automatically so you get these fixes the moment they drop.

The “Bundled Software” Trick

When installing free utilities, don't just click “Next, Next, Next” as fast as possible. Read the screens carefully. Slipped into the installer, you will often find pre-checked boxes that say “Yes, I want to install this free browser toolbar and change my search engine!” Always uncheck these boxes.

Stick to Official Sources

Only download software directly from the developer's official website or the built-in Microsoft Store. Avoid third-party “free download aggregate” sites, which often pack legitimate software inside a malicious wrapper installer.

6 Topic 6 of 7

Smishing & Vishing (Text & Phone Scams)

Cybercriminals don't just stay on your computer; they target the phone in your pocket. These scams rely heavily on social engineering—manipulating your emotions, fear, or trust to get you to hand over information willingly.

Smishing (SMS/Text Phishing)

You receive a text message claiming a package cannot be delivered due to an incorrect address, or that a suspicious charge was made on your debit card. The text always includes a shortened link (like bit.ly or tinyurl.com) designed to take you to a fake login or tracking page. The Reality: Major delivery services (USPS, UPS, FedEx) and banks will never text you out of the blue asking for personal details or payment to redeliver a package.

Vishing (Voice Phishing)

A scammer calls you pretending to be from the IRS, a tech support company, your utility provider, or even a local police department. They use caller ID spoofing to make your phone screen display a legitimate company name or local area code.

The High-Pressure Tactic

The caller will often threaten you with immediate arrest, high fines, or shutting off your power if you don't pay them right away. They will demand payment via methods that cannot be reversed, such as gift cards, prepaid debit cards, or cryptocurrency.

How to Handle It: If you receive a panicked text or a high-pressure phone call, hang up immediately. Do not reply to the text, and do not click the link. If you are worried the issue might be real, look up the official customer service number from the company's real website or the back of your bank card and call them back directly.
7 Topic 7 of 7

Spotting AI Trickery (Deepfakes)

Seeing or hearing someone on a screen feels incredibly real, but AI can now change faces and voices instantly. Computer tools can create fake videos and cloned voices that look and sound just like real people.

The Imposter Illusion

Bad actors can easily copy a short video of a family member, a celebrity, or a coworker. If you trust the fake, you might be manipulated into sharing private data, downloading malware, or sending money.

Verify Before You Trust

Never react to urgent videos asking for cash, passwords, or immediate, secret actions. Verify the request by calling the person directly on a trusted number or speaking to them face-to-face first.

Look for Digital Glitches

When evaluating suspicious media, look closely for visual errors like mismatched blinking, distorted teeth, or robotic audio. Treating unusual online content with healthy skepticism helps everyone stop digital fraud before it succeeds.

If you are an educator and wish to use this booklet in your classroom, a PDF without the branding is available at no charge on request. Please direct education-related requests to schools@phillipscomputer.org.

Sources & Further Reading

This guide is based on official guidance from U.S. federal agencies that track and respond to these scams — the FTC, FBI, CISA, NIST, and FCC. Each topic below links to the primary source it draws from.

1. Spotting Scam Emails (Phishing)

2. Avoiding Malicious Ads (“Malvertising”)

3. Securing Your Accounts (Passwords & 2FA)

4. Social Engineering & Oversharing

5. Smart Software Management

6. Smishing & Vishing (Text & Phone Scams)

7. Spotting AI Trickery (Deepfakes)