Online scams are digital tricks designed to steal money, passwords, personal data, or access to accounts. They often appear as urgent messages, fake prizes, account warnings, or links that look official at first glance. Learning to spot scams matters because digital safety protects your health, finances, schoolwork, family, and community.
It is also part of emergency preparedness because false alerts and fake donation pages can spread quickly during storms, earthquakes, disease outbreaks, and other real events.
Understanding Safety & Emergency Preparedness: How to Spot Online Scams
Many scams work through social engineering. This means the scammer studies normal human reactions such as trust, fear, curiosity, sympathy, or the wish to solve a problem quickly. A message may copy the logo, colors, and writing style of a delivery company, game, bank, or school service.
The surface can look convincing while the sender is false. Email addresses and web links deserve slow inspection. A link can show a familiar name but lead somewhere else.
On a computer, hovering over a link can reveal its destination without opening it. On a phone, press and hold carefully if the app supports it. Small changes in a web address matter, including extra words, misspellings, or an unfamiliar ending.
Scammers often try to move a conversation away from places where rules and records protect people. They may ask a student to continue through a private chat, text message, gift card, cryptocurrency payment, or file sharing site. They may pretend to be a friend whose account was taken over.
A sudden request for money, game items, images, or a login code should be checked through a separate route. Call the person, speak to them in person, or use a known contact method.
Do not reply directly to the suspicious message, because the reply may go to the scammer. Screenshots can preserve useful evidence before a message is deleted.
Account security reduces the damage if a password is leaked. Use a different strong password for each important account, especially email. Email matters most because password reset links often arrive there.
A password manager can create and store long unique passwords, so students do not need to memorize every one. A second sign in step is strongest when it uses an authentication app or a security key. Text message codes can still help, but phone numbers can sometimes be stolen through account transfer fraud.
Keep recovery email addresses and phone numbers current. Review account activity, connected devices, and recovery settings after any sign of trouble.
During an emergency, false information can cause real harm. Posts may show old photos from another place, invent evacuation instructions, or collect donations for people who do not exist. Check the date, location, original source, and whether several reliable sources agree.
Official alerts may be shared by schools or local agencies, but a repost can be altered. Go to the known website or official app yourself instead of using a link in a social post. If you clicked something suspicious, act early.
Tell a trusted adult, change the affected password from a safe device, sign out of other sessions, and report the account or message on the platform. Feeling embarrassed is common, but reporting quickly can protect other people too.
Key Facts
- Risk = likelihood × impact, so a scam that is likely and harmful needs immediate caution.
- Stop, check, report is a safe response pattern for suspicious messages.
- A real organization will not ask for your password, verification code, or bank login through a text or email.
- Look for red flags: urgency, threats, prizes, spelling errors, strange links, and requests for secrecy.
- Use two-factor authentication because password + second proof is safer than password alone.
- Verify emergency information using trusted sources such as official school, city, weather service, health department, or emergency management websites.
Vocabulary
- Phishing
- Phishing is a scam that uses fake messages or websites to trick people into sharing private information.
- Malware
- Malware is harmful software that can damage a device, steal data, or let someone control a system without permission.
- Two-factor authentication
- Two-factor authentication is a login method that requires a password plus a second proof, such as a code or app approval.
- Spoofing
- Spoofing is when a scammer disguises a message, phone number, email address, or website to make it look trustworthy.
- Emergency alert
- An emergency alert is an official warning that gives safety information during hazards such as severe weather, fire, disease outbreaks, or earthquakes.
Common Mistakes to Avoid
- Clicking a link because the message feels urgent is wrong because scammers use pressure to stop you from thinking carefully. Pause and verify the sender before opening anything.
- Trusting a logo or official-looking design is wrong because scammers can copy images, colors, and formatting from real organizations. Check the web address, sender address, and official source.
- Sharing a verification code with someone who says they are helping is wrong because that code can let them enter your account. Real support staff do not need your private login codes.
- Forwarding scary emergency messages without checking them is wrong because false information can cause panic and unsafe choices. Confirm alerts through official weather, health, school, or local emergency channels first.
Practice Questions
- 1 A student receives 12 messages in one week, and 3 are suspicious. What fraction and percent of the messages are suspicious?
- 2 A fake charity page claims it has raised $4,800 after 160 people donated the same amount. What is the claimed donation per person, and what should you verify before donating during an emergency?
- 3 A message says, 'Your school account will be deleted in 10 minutes. Click this link and enter your password now.' Explain at least three red flags and describe the safest next steps.