A message arrives saying a parcel is waiting, a friend needs money or an account is about to close. The first useful response is a pause. You do not have to decide from the spelling or logo alone whether it is genuine, and you do not have to act using the link or number inside the message.
Try the family scam-message quiz
Read each fictional scenario, choose A or B, then open its answer. You can use these controls with a keyboard. No personal information or scores are stored.
1. A parcel text asks for a small fee
A: pay through its link. B: check through the delivery service’s usual app or website.
Reveal answer 1
1. B – check separately Do not use the unexpected payment link.
2. A friend messages from a new number for money
A: call their existing number to check. B: send it because the name is familiar.
Reveal answer 2
2. A – use an existing contact route Names and accounts can be copied or misused.
3. A gaming contact asks for your login code
A: share it to help. B: keep it private and tell a trusted adult.
Reveal answer 3
3. B – keep codes private A security code can allow someone into your account.
4. An account-closure email has perfect spelling
A: that proves it is real. B: check through the genuine service independently.
Reveal answer 4
4. B – spelling is not proof Open the genuine app or known website yourself.
5. You entered bank details into a suspicious page
A: hide it and wait. B: contact the bank promptly through a trusted route.
Reveal answer 5
5. B – get help promptly Tell the bank what happened. Do not wait because you feel embarrassed.
Look at the request, not just the appearance
Scam messages can look polished and may copy a familiar organisation. A friendly name, convincing logo or padlock on a website does not prove that a request is safe. Ask what you are being encouraged to do: pay quickly, disclose a password, open an attachment or keep something secret.
Unexpected urgency is a reason to stop and check. It is not proof by itself, just as a message with no spelling mistakes is not proof of honesty. Our fictional quiz examples are designed for discussion, not as a complete fraud-detection test.
Check through a route you already trust
If a message claims to be from a service you use, open its usual app or type the known website address yourself. For a person you know, contact them using a number or channel you already had, rather than the new details in the request.
Do not reply, open attachments or follow links in a message you suspect is fraudulent. Do not share passwords or one-time security codes with someone who contacts you. An unexpected caller who knows some personal information still needs independent checking.
Agree a family response
For children, a simple rule can be easier to remember than a long list of technical clues: “Pause, show a trusted adult, and check another way.” Make it clear that telling you about a mistake will not result in blame.
Talk about gaming messages, social media and marketplace conversations as well as email. A request from a familiar account may still be suspicious if that account has been taken over. A family code word can be an extra check in some situations, but it should not replace contacting the person independently.
If somebody has already clicked
Stop the interaction and ask for help promptly. If payment information or money is involved, contact the bank through its official app or a trusted number. If login details were entered, go directly to the genuine service to secure the account and follow its recovery guidance; seek help for any reused passwords too.
The right next steps depend on what was shared or downloaded. Use the NCSC guidance linked below rather than assuming that deleting the message has fixed everything. Keep relevant evidence privately for the service, bank or authorities handling the incident.
Report suspicious messages
In the UK, suspicious emails can be forwarded to [email protected] and suspicious texts to 7726. Reporting does not guarantee a response or recover lost money. Use the official guidance below for further reporting routes and what to do after a scam.
Try the quiz together. Choose a response, then open the explanation. There is no need to enter names, real messages, passwords or contact details. The printable version includes an answer sheet for a classroom or family discussion.
