Scams these days are clever enough that “I’d never fall for that” has quietly become “wait, was that real?” Anyone can have that moment — including people who work in IT.
Scams and strange messages can leave anyone feeling unsure. You may not know whether you clicked something dangerous, gave away information, or simply saw a convincing fake. The first step isn’t to feel embarrassed. It’s to pause and get clear.
Stop and preserve the evidence
If you receive a suspicious message, don’t keep clicking or replying. Take a screenshot if you can. Keep the email or message until someone’s had a chance to check it. If money, passwords, or identity details are involved, treat the moment as important.
Useful details to keep: who sent it, when it arrived, what it asked you to do, and whether you clicked anything.
Check the important accounts
If you may have entered a password somewhere suspicious, focus on the account that uses that password first. Then think about where else the same password might be used — because we’ve all reused one or two.
The accounts that usually matter most: email, banking, phone provider, Microsoft account, social media, cloud storage, and any password manager you rely on.
Don’t rush password changes from an unsafe device
Changing a password is a good step, but it should happen from a trusted device. If the device itself is behaving strangely, ask for help before doing anything else. Where possible, switch on multi-factor authentication and make sure your recovery details point to current, trusted phone numbers and email addresses.
Talk about scams without shame
Families stay safer when people can speak up. A child, parent, partner or older relative shouldn’t feel silly for asking. Scammers rely on pressure and embarrassment to keep people quiet. A calm conversation is what breaks that pressure.
A simple test
Create a family rule: nobody acts on an urgent payment, password, or gift card request without checking with a second trusted person first. Even a 30-second pause and a quick phone call will stop most of the damage scammers are counting on.
A calm next step
If something feels wrong, pause first. Write down what happened, check your most important accounts, and ask for help before trying multiple fixes at once. The ten-second pause is the most underrated piece of cyber kit you own — and it’s free.