🛡️ Stay safe online
Scammers don't hack computers — they hack people. Every scam, no matter how fancy, works by making you feel rushed, scared, or excited enough to skip thinking. Learn the pattern once and you'll see it everywhere.
The golden rules
Urgency = danger
"Act within 24 hours!" Real organisations give you time. Scammers can't afford to.
Check the actual address
Not the display name — the domain. netflix.com is real; netflix-billing-secure.com is not.
Go in the front door
Never log in via a link in a message. Type the site yourself or use your bookmark/app.
Nobody legit asks for these
Passwords, codes from your phone, gift cards, crypto, or moving money to a "safe account." Ever.
Verify out-of-band
Get a weird request from a family member or "the bank"? Hang up and call the real number yourself.
No shame, ever
Clicked something dodgy? Tell Michael immediately. Fast beats embarrassed — always.
Is it a scam? The 30-second checklist
- Did I expect this? Unexpected messages start guilty until proven innocent.
- Is it pushing my emotions? Fear, urgency, or too-good-to-be-true excitement.
- What's the real sender? Tap the name to see the actual email address or number.
- Where does the link really go? Long-press (phone) or hover (computer) to preview it. Don't tap it.
- What is it actually asking for? Money, codes, passwords, personal details → stop.
If anything fails the check: don't click, don't reply — screenshot it and send it to Michael. You will never be told off for asking. Being asked is the whole point of this page.
🎯 Practice: is it a scam?
Real-world style examples. Read each one, make your call, and see how the pros spot the tells.
If you think you've been caught
- Don't panic, and don't hide it. Minutes matter; embarrassment doesn't.
- Gave out a password? Change it right now (1Password makes this quick), starting with your email.
- Money involved? Call the bank immediately using the number on your card — they can often freeze transfers.
- Tell Michael. He can check what's affected and help lock things down.
- Report it — in Australia: Scamwatch (scamwatch.gov.au) and ReportCyber (cyber.gov.au).
Everyday habits that do the heavy lifting
- Use 1Password everywhere. It won't fill your password on fake sites — a silent scam detector. Get access here.
- Turn on two-factor authentication for email and banking. A stolen password alone becomes useless.
- Keep devices updated. Those annoying updates patch the holes scammers use.
- Codes texted to you are secrets. Anyone who asks you to read one out is stealing your account — including "support staff."
- Slow is safe. No legitimate anything is ruined by taking ten minutes to check.