Spot online scams.
Stay safer.

Free, practical guides to recognize suspicious messages, protect your accounts, and know what to do if you think you’ve been scammed.

Beginner learning path →

Protect your accounts

Build a few useful habits, starting with your email and passwords.

Make a safer start

The 30-second
scam check

A quick pause before you click, reply, or pay. This checklist helps you decide what to verify; it does not certify that a message is safe.

Practice with example messages →
  1. Was I expecting this?An unfamiliar bill, prize, or delivery request deserves a second look.
  2. What are they asking me to do?Notice pressure to share a password, approve a login, move money, or install an app.
  3. Can I check another way?Open the company’s app yourself or use a number from a statement. Don’t rely on the message’s contact details.
  4. Can I pause the conversation?Stop and ask someone you trust if the story feels urgent or confusing.

Source: FTC: recognizing and avoiding phishing (opens in a new tab or window).

Scam guides

Clicked a suspicious link?

Separate a simple click from a shared password, download, remote access, or payment.

Read the recovery guide

What phishing looks like

Five fictional messages, with the warning signs explained in everyday language.

Explore the examples

Common scam tactics

“Your account needs attention”

A login alert can be real or invented. Open the service independently to check your account, instead of following the message.

Compare fictional phishing messages →

“This deal won’t last”

A countdown does not prove demand. Check the merchant and payment method before a discount pulls you into checkout.

Check a shopping website →

Four habits for stronger accounts

  1. Give each account its own password

    Use a password manager to create and store long, unique passwords. Start with email, which often receives account reset links.

  2. Add another sign-in check

    Turn on multi-factor authentication (MFA) where offered. Never share a one-time login code or approve an unexpected sign-in request. MFA reduces risk; it is not a guarantee.

  3. Keep software current

    Enable automatic updates for your device, browser, and apps. Install updates through built-in settings or the publisher’s official site.

  4. Prepare for a lost device

    Keep recovery details current and backup codes somewhere secure. Back up important files so you have another copy.

Source: CISA: cybersecurity awareness basics (opens in a new tab or window).

Source: FTC: why protecting your email matters (opens in a new tab or window).

Messages, calls & phone scams

Focus on what someone wants you to do, rather than trying to recognize every new scam name.

Free cybersecurity learning

Courses, podcasts & videos

Follow the beginner path or browse courses, podcasts, and channels.

Start the learning path →