Prevent next time. Simple rules that work
Use this page after a scare, or anytime you want to feel safer online.
Small habits make a big difference.
Use this topic if you or someone you support wants to:
- Reduce the chance of being caught again
- Set up a few protections in 10 to 30 minutes
- Know what to do when a message feels urgent or pressuring
If something is happening right now, start with:
Money at risk. What to do right now
A helpful rule
Real organisations do not rush you.
You are allowed to slow down, verify, and call back using a trusted number.
The top 5 habits
-
Use a trusted route
- Do not use links or phone numbers from a message.
- Open the official app, type the website address yourself, or use a number you already trust.
-
Never share codes or passwords
- Do not share one time codes, PINs, or passwords. Not even with “bank staff”.
-
Pause when you feel pressure
- Urgency, secrecy, threats, or shame are red flags.
- Take a breath. Ask someone you trust to look with you.
-
Keep your email secure
- Email is the master key for most accounts.
- Use a strong passphrase, and turn on two factor authentication where you can.
-
Keep devices updated
- Updates fix security problems.
- Turn on automatic updates if possible.
A 10-minute setup
Do what you can. One or two changes is still progress.
- Turn on two factor authentication for email and banking.
- Change passwords you reuse in more than one place.
- If you can, use a password manager to create and store strong passwords.
- Check your bank app for security options, for example:
- Freeze card
- Extra sign in checks
- Alerts for payments or new payees
A simple script for calls and messages
Use these lines as a default response.
- “I do not deal with this by phone. I will call back using my own number.”
- “I do not click links from messages. I will check in the official app.”
- “I do not share codes or passwords.”
Then stop contact.
Shopping and marketplace checks
Before you pay.
- Use well known retailers where possible.
- Be cautious of “bank transfer only”, crypto, or paying outside the platform.
- Look for real contact details and a returns policy.
- If the deal feels too good to be true, pause.
Then stop contact.
Social media and messaging checks
- If a friend or family member asks for money, verify by calling them on a number you already have.
- Be cautious of requests to move off platform.
- Do not share one-time codes, even if the person seems genuine.
If you are still unsure
If you want to keep learning, here are the best next pages:
- To recognise common patterns, see: Scam types. What they look like
- For a guided route, see: 2 minute check
- To keep a record for your own peace of mind, see: Report and record. Simple incident log