How to protect kids from scams
Kids are not safe from scams just because they are good with technology.
They live where scams happen now: games, DMs, QR codes, creator links, school chats, fake giveaways, group messages, and accounts they care about more than adults realize.
The point is not "kids are careless." The point is that kids move fast in places where scam messages also move fast.
The scams kids and teens actually see
| Scam | What it looks like | What to teach |
|---|---|---|
| Account takeover | "Your Instagram account will be deleted. Verify now." | Open the app yourself |
| Gaming scam | "Free Robux, skins, coins, or account upgrade." | Free game currency is usually the bait |
| Fake delivery | "Your package needs a small fee." | Check the store or carrier directly |
| Sextortion threat | "We have a video from your phone camera." | Show an adult immediately |
| Fake job or task | "Earn money from your phone today." | No stranger gets ID, bank, or codes |
| Fake school file | "Open this file for schedule changes." | Ask a teacher or school channel |
| QR code phishing | "Scan to claim reward or join group." | QR codes are links, not magic |
Why kids click
It is not because they are careless.
Scam messages exploit normal kid behavior:
- Curiosity.
- Social pressure.
- Fear of losing an account.
- Fear of getting in trouble.
- Desire for game rewards.
- Desire to earn money.
- Embarrassment after clicking.
FTC based reporting has shown younger adults are not immune to fraud losses. The pattern is simple: people who live online get approached online.
The rule that matters most
Make this the family rule:
"If a message scares you, you will not be in trouble for showing me."
That one sentence matters more than a lecture.
Kids hide scams when they expect anger. Scammers count on that, especially with sextortion threats, fake malware emails, and account takeover messages. The message is designed to make a child panic alone.
Five setup steps
- Turn on iPhone filtering and spam controls.
- Turn on two factor authentication for important accounts.
- Use a password manager so every account has a different password.
- Keep payment methods out of browsers and games unless needed.
- Make a rule that no app, game, creator, stranger, or "support agent" gets a code.
What to teach them to check
Ask:
- Does the link match the real website?
- Is the message threatening a deadline?
- Is it asking for a code?
- Is it asking for a payment method?
- Is it promising free money or game currency?
- Did it come from a stranger or a hacked friend?
- Would this company normally DM a kid?
Do not make the test "does it look real?" Some scam pages look real enough. Make the test "does the request make sense?"
What to say if they already clicked
Use this:
"Thank you for telling me. You are not in trouble. Show me what happened."
Then change passwords, revoke suspicious sessions, contact the bank or platform if money or codes were shared, and save screenshots.
Read next
- /us/blog/influencers-social-media-dangerous-scams/
- /us/blog/spear-phishing-when-scams-seem-way-too-real/
- /us/blog/best-spam-text-blocker-iphone-2026/
Sources
- FTC, fraud reports by age and social media scam patterns: https://www.ftc.gov/news-events/data-visualizations/data-spotlight
- FTC based reporting on younger adults and fraud losses: https://www.investopedia.com/age-and-financial-fraud-11714608
- Research on smishing response behavior: https://arxiv.org/abs/2212.13312
- Context aware spear phishing with public social media data: https://arxiv.org/abs/2605.11268