How do I help my child spot an online scam?

The best way to help your child spot an online scam is to teach them one habit and a few warning signs, then make sure they know they can come to you without getting into trouble. Webwise, Ireland’s online safety awareness centre, suggests a simple rule: Stop, Think, Check before clicking, paying or sharing anything (Webwise). Most scams rely on rushing people, so a pause does a lot of the work.

You don’t need to be technical to teach this. It’s the same instinct you’d use with a cold caller at the door, just applied to game chats, messages and pop-ups.

What scams aimed at children actually look like

Scams that reach children rarely look like the badly spelled emails adults have learned to ignore. They’re designed around what kids want: free stuff, help in a game, attention from someone they admire.

Webwise and Internet Matters, the UK online safety charity, describe these common types (Webwise, Internet Matters):

• Phishing: a fake message or page that tricks someone into typing in their password. Webwise gives the example of fake Roblox login pages and TikTok password resets.
• “Free” offers: free in-game currency, skins (outfits for a game character), or help beating a level. Internet Matters says the scammer usually wants account access or personal details, and the child ends up losing their account.
• “You’ve won!” messages: a prize that needs a small “processing fee” first.
• Impersonation: a fake profile pretending to be a friend, a teacher or an influencer. Internet Matters calls this social media spoofing, and notes it’s often used to ask for money.
• Fake shops: cheap or “exclusive” items, sometimes sold through social media shops, that turn out to be knock-offs or never arrive.
• Money mule offers (older teens): someone offers a cut of the money, or a flashy gift, for letting them move money through the teen’s bank account (Webwise). This is worth a specific chat with any teen who has a bank card.

Webwise lists gaming platforms, TikTok, Instagram and messaging apps as the places these turn up most.

The warning signs to teach

Scams come in lots of shapes, but they tend to share the same tells. Webwise and Internet Matters both point to these:

1. Hurry. “Act now”, “offer ends in 10 minutes”, “your account will be deleted”. Pressure to act immediately is the biggest red flag.
2. Too good to be true. Free currency, a prize they didn’t enter for, a huge discount.
3. Strong feelings. A message designed to make them scared, panicked or very excited.
4. “Let’s chat somewhere else.” A request to move quickly from a game to another app.
5. “Don’t tell your parents.” Webwise is clear that no genuine opportunity online should need to be kept secret.
6. Asking for logins or details. Webwise’s phishing guide notes that a reputable company won’t send a link asking you to hand over personal or financial details (Webwise).

Webwise also warns that phishing messages now look far more convincing than they used to, so spelling mistakes are a clue but not a guarantee. If in doubt, the safe move is to close the message and go to the real app or website directly.

How to have the conversation

A short, regular chat beats one big lecture. A few approaches that work well:

• Make it a game. Next time a dodgy text lands on your own phone, show it to them and ask “What gives this away?” Kids are often brilliant at spotting the tells once they know what to look for.
• Talk about their games. Ask what free offers or strangers they’ve come across in Roblox, Fortnite or whatever they play. You’ll learn a lot, and it keeps the conversation about them, not about rules.
• Agree a “check with me” rule. Anything that asks for a password, money, a code or a photo gets shown to a grown-up first. Internet Matters suggests children should come to you if someone offers them something free or threatens them.
• Promise no trouble. The single most useful thing you can say is that they won’t be punished for telling you. Children who fear losing their device are much less likely to speak up.

Simple settings that help

You don’t need special software. Webwise recommends a few basics (Webwise):

• Two-factor authentication (2FA) on gaming and social media accounts. This means a code is needed as well as the password, so a stolen password alone isn’t enough. Roblox recommends it in the Internet Matters guide.
• Never share login details, even with friends.
• Keep personal details private: real name, birthday and school are the kind of information scammers use.
• Check privacy settings together on the apps they use most.

If your child does get caught out

It happens to careful adults too, so try to stay calm. Webwise’s steps are (Webwise):

1. Reassure them. Make it clear they are not in trouble.
2. Gather evidence. Take screenshots and note account names before anything is deleted.
3. Report it on the platform where it happened.
4. Contact your bank straight away if any card or bank details were shared.
5. Change passwords on the affected account (and any account using the same password), and turn on 2FA.
6. Report it further if needed: Webwise points parents to the Irish Internet Hotline at hotline.ie and to An Garda Síochána’s cyber crime advice.

If a scam involves threats to share private images, which Internet Matters calls sextortion, don’t pay and don’t delete the evidence; report it and get support. Children and teens can talk to Childline free, any time, on 1800 66 66 66 or by texting 50101 (Webwise).

What to do next

• This week, show your child one real scam message. Use a dodgy text or email from your own phone and spot the warning signs together. Five minutes is plenty.
• Turn on two-factor authentication on their main game or social media account, sitting with them so they know how it works.
• Agree your “check with me” rule: anything asking for a password, money, a code or a photo gets shown to you first, with no trouble for asking.
• Save Childline’s number (1800 66 66 66) in your child’s phone, so they have somewhere to turn even if they’re not ready to talk to you.

Every child will click on something they shouldn’t at some point. What matters most is that they tell you when it happens, and that’s something you can build now.