1. If it feels urgent, SLOW DOWN
Scammers always create panic. Real banks, governments, and family never demand you decide in minutes. The moment you feel rushed, stop, breathe, call someone you trust.
2. Never send money to someone you haven't met in person
Gift cards, bank transfers, crypto, Western Union, it doesn't matter how they ask. If you've never physically met the person, do not send money under any circumstances.
3. Always verify by calling directly, using YOUR saved number
Bank calls about fraud? Hang up. Find the number on the back of your card and call that. Someone messages claiming to be your child? Call their real saved number.
4. If it sounds too good to be true, it is
Free iPhone. Celebrity giveaways. Jobs paying thousands a week from home. A crypto guru with guaranteed returns. None of these exist. Real opportunities do not arrive in your inbox.
5. Talk to someone before you act
Scammers want you alone and in secret. Before clicking a link, sending money, or sharing personal information, tell a family member or close friend what's happening. Just saying it out loud often breaks the spell.
Always call back on a saved number before sending money
No matter how convincing the message, dial the real person's saved number yourself. This one step stops the 'Hi Mum' scam completely.
Never share a 6-digit code you receive by SMS with anyone
WhatsApp will NEVER call and ask for a code. The moment you share it, your account is gone.
Block unknown people from adding you to groups
Go to WhatsApp → Settings → Privacy → Groups → change from 'Everyone' to 'My Contacts'.
- 1Open WhatsApp
Find WhatsApp on your phone and tap it to open.
- 2Go to Settings
Tap the three dots (Android) or 'Settings' tab (iPhone).
- 3Tap 'Privacy'
Find and tap Privacy from the settings menu.
- 4Tap 'Groups'
Scroll down until you see Groups and tap it.
- 5Select 'My Contacts' or 'Nobody'
Strangers can no longer silently add you to scam groups.
Check the FULL email address, not just the display name
Tap or hover the sender name to see the full address. 'amazon@support-account-verify.com' is NOT Amazon.
Never click links in emails, go directly to the website yourself
Close the email. Open the app yourself by typing it in your browser. A link can take you to a perfect fake.
Unexpected invoices or receipts are bait
'Thank you for your $299 purchase.' In panic you call the number in the email, that number is the scammer. Check your bank app directly.
SMS from your bank with a link is almost always fake
Real banks send SMS notifications but never include links asking you to log in.
Hang up and call back on the official number
Scammers can fake the phone number on your screen. Always hang up and call back using the number on your card or their official website.
The government will never threaten you over the phone
Police do not call demanding payment to avoid arrest. Tax authorities send letters. Immigration doesn't demand gift cards. Hang up immediately.
AI voice clones can sound exactly like your family, create a safe word
AI can clone any voice from just a few seconds of audio. Agree on a secret family safe word now. If a 'family member' cannot say it, hang up.
Never allow remote access to your phone or computer
'Tech support' calls asking you to install an app to fix a virus are scams. That app gives them complete control of your device.
Shocking videos of celebrities may be completely fake
Before believing or sharing a shocking video, search the news on BBC, Reuters, or the person's official account. Sharing a deepfake makes you part of the scam.
Real-time video calls can be faked too
Ask them to do something unexpected: wave with a specific hand, hold up a random number of fingers. Deepfakes struggle with spontaneous requests.
Create a family emergency safe word right now
Agree on one secret word only your family knows. If anyone calls claiming to be a family member in an emergency, they must say the safe word. Do this today.
Rule 1: Make it at least 12 characters long
'MySonBorn2010!' is much stronger than 'M@rk10', and easier to remember.
Rule 2: Mix letters, numbers, and symbols
'sunshine' is weak. 'Sunshine#2024!' is strong. Even this small change makes it dramatically harder to crack.
Rule 3: Never use the same password twice
If one website gets hacked, criminals test that password on your bank and email automatically.
Turn on 2FA for Gmail, do this today
Your Gmail is the master key to all your other accounts, protect it first.
Turn on 2FA for WhatsApp
Settings → Account → Two-step verification → Enable.
Turn on Facebook two-factor authentication
Facebook → Menu → Settings & Privacy → Settings → Security and Login → Use two-factor authentication.
Review which apps have access to your Google or Facebook account
Remove anything you don't recognise. Each unknown connection is a potential backdoor.
Check logged-in devices on all accounts
If you see a device or location you don't recognise, remove it immediately and change your password.
Never open your banking app on public Wi-Fi
If you need to check your bank while out, turn off Wi-Fi and use your mobile data instead.
Confirm the exact Wi-Fi name with a staff member
Ask: 'What is the exact name of your Wi-Fi?' Scammers create hotspots named 'Starbucks Free WiFi', identical to the real one.
Turn off Wi-Fi and forget the network when you leave
Your phone reconnects automatically to saved networks, a scammer can recreate them. Tap the network and select 'Forget this network.'
Only install apps from the official app store
Never install an app sent to you as a file via WhatsApp, email, or any website.
Check what permissions your apps are asking for
A flashlight app does not need your contacts. A game does not need your location. Go to Settings → Privacy to review.
Update your phone's operating system, not just apps
Settings → General → Software Update (iPhone) or Settings → System → System Update (Android).
Stop all contact with the scammer immediately
Block their number, email, and social media. Do not try to get your money back through them, they will only scam you further.
Call your bank right now, number on the back of your card
Tell them you've been scammed. Ask to freeze or reverse the transfer. Banks can sometimes stop payments if contacted quickly enough.
Change your passwords, starting with your email
Email first, then bank app, then social media. Change from a device the scammer has never touched.
Check if your accounts are still yours
Log in and check for unfamiliar messages sent, login locations, or changed settings.
Tell a family member or trusted friend right now
Do not hide this out of shame. Scammers rely on victims staying silent.
Report it, keep all evidence
UAE: Dubai Police eCrime Hub, ecrimehub.gov.ae, or call 999 in an emergency · UK: Report Fraud, reportfraud.police.uk or 0300 123 2040 (Scotland: call 101) · US: reportfraud.ftc.gov · AUS: scamwatch.gov.au
Watch out for 'recovery scams'
Someone may contact you claiming they can recover your money for a fee. This is a SECOND scam. Ignore and report them.
Want every step-by-step guide in one place?
The Scam-Proof Playbook has 30+ illustrated guides, including a Master Protection Checklist, the full 7-step Gmail security guide, WhatsApp two-step verification, password managers, advanced account security, and Private DNS for public Wi-Fi.