Cybersecurity for Seniors: Plain-English Safety Steps

Criminals target older people by phone, post, email, text and at the front door, and the best defence is a few simple habits rather than technical skill. This guide is for people in later life, and for the family members, friends and carers who help them. It explains the scams that come up most often, the settings worth changing on a phone or computer, and exactly who to call if something goes wrong. Everything here is written in plain English, and any technical word is explained the first time it appears. You do not need to be good with computers to follow it.

Key takeaways

Pressure is the biggest warning sign. A real bank, police officer or company will give you time to think. Anyone who rushes you, or tells you to keep it secret, is very likely a criminal.
Never use the number or link you were given. Hang up, then contact the organisation using a number you look up yourself, such as the one on the back of your bank card. In the UK you can dial 159 to reach your bank safely.
Odd payment requests mean a scam. Nobody genuine asks you to pay with gift cards, cryptocurrency (digital money such as Bitcoin) or a transfer to a "safe account".
Talk to someone you trust before you act. A two minute chat with a friend or relative stops a great many scams.
Report it quickly and without embarrassment. Scams fool clever, careful people every day. Calling your bank straight away gives you the best chance of getting money back.

The scams you are most likely to meet

Age UK lists the scams it sees most often among older people: phone scams and cold calls, scams by post, doorstep scams and bogus traders, scam emails that copy trusted companies, pension and investment scams, fake TV Licence messages, catfishing (someone using a fake online profile to start a relationship) and, more recently, scams that use artificial intelligence (AI). The table below explains what each one usually looks like.

Scam	What it usually looks like	What to do
Bank or police impersonation call	A caller says your account is at risk and asks you to move money to a "safe account" or hand your card to a courier.	Hang up. Call 159 or the number on your card from a different phone if you can.
Family emergency	A text or call from "your son" or "your grandchild" on a new number who needs money urgently.	Call the person on the number you already have for them before doing anything.
Computer or broadband "support"	A pop-up or call saying your computer has a virus and asking you to install something.	Close the page or hang up. Never let a stranger take control of your computer.
Doorstep trader	Someone offers urgent roof, drive or garden work and asks for cash up front.	Say no at the door. Get quotes from traders you choose yourself.
Fake delivery or bill message	A text or email about a missed parcel, unpaid bill or TV Licence with a link.	Do not click. Check by going to the company's website yourself.
Romance or friendship scam	A new online friend who cannot meet in person and soon needs money.	Never send money to someone you have not met. Talk to family.
Investment or pension offer	High returns, little risk, "only for you", often with a celebrity name attached.	Check the firm on the FCA Firm Checker using the FCA website, not a link they send.

For more detail on the most common of these, see the How to Spot a Phishing Email Guide, the Recognising Tech Support Scams Guide and the Romance and Investment Scam Awareness Guide.

Four signs it is a scam

The US Federal Trade Commission (FTC), which protects consumers in America, sums up almost every scam in four signs. They apply just as well in the UK.

Someone pretends to be from an organisation you know: a bank, the police, HMRC, a utility company, a charity or a family member. The name or number on your screen can be faked, so it proves nothing.
There is a problem or a prize: you owe money, your account is frozen, your computer has a virus, a relative is in trouble, or you have won something but must pay a fee first.
You are pushed to act now: stay on the line, do not tell anyone, or you will be arrested, fined or lose your money.
You are told to pay in an unusual way: gift cards, cryptocurrency, a money transfer service, a payment app, or by sending back part of a cheque that later bounces.

Citizens Advice adds a few more: contact out of the blue, an offer that seems too good to be true, no real postal address, requests for passwords or PINs, and nothing agreed in writing. If even one of these appears, stop and check.

Safe habits for phone calls, texts and the door

The UK banking campaign Take Five to Stop Fraud, run by UK Finance, puts the advice in three words: Stop, Challenge, Protect. Stop and think before giving money or information. Challenge the request, because you are always allowed to refuse or ignore it. Protect yourself by calling your bank and reporting it if you think you have been caught out.

Use 159 for anything about money: 159 is a short number run by phone companies and banks that connects you straight to your own bank. Stop Scams UK says it cannot be faked by criminals and covers banks holding over 99% of UK current accounts, including Barclays, HSBC, Lloyds, Nationwide, NatWest, Santander and many others.
Wait before calling back: if you can, use a different phone, or wait a few minutes after hanging up, so you are sure the line has cleared.
Agree a family password: choose a word or phrase only your close family knows. If someone calls in a panic claiming to be a relative, ask for it. This defeats both ordinary impostors and the new voice-copying scams described in the Spotting Deepfake Scams Guide.
At the door: use a door chain or viewer, ask for ID, and call the company using a number from your own records, not one on the card they hand you. You never have to let anyone in.
By post: letters saying you have won a lottery you never entered, or asking for a fee to release money, are scams. Do not reply.

Set up your phone and computer in 15 minutes

A few settings make a big difference. Menus change from time to time, so if you cannot find an option, search your phone's settings for the name shown below or ask a family member to help.

Setting	Why it helps	Where to find it
Automatic updates	Updates fix weaknesses criminals use to get into devices.	iPhone: Settings, General, Software Update. Windows and Android: look for "Updates" in Settings.
Silence or screen unknown callers	Calls from numbers not in your contacts go to voicemail or are asked why they are calling.	iPhone: Settings, Apps, Phone, Screen Unknown Callers (choose Ask Reason for Calling or Silence).
Spam call filtering	Calls your phone company flags as spam are moved out of the way.	iPhone: Settings, Apps, Phone, Call Filtering. Android phones have a similar spam setting in the Phone app.
Two-step verification	A thief needs your phone as well as your password to get into email or banking.	In the security section of each account. See the Two-Factor Authentication for Everyone Guide.
A password manager	An app that remembers a different strong password for every site, so you only remember one.	See the Password Managers Explained for Everyone Guide.
Phone screen lock	Stops anyone who picks up your phone from reading your messages or opening banking apps.	See the Securing Your Smartphone Guide.

Apple notes one useful point: if you turn on call screening, save the numbers of your doctor, pharmacy, family and bank in your contacts so their calls always come through.

Online banking, shopping and email

Type the address yourself: go to your bank or a shop by typing its address or using its official app, not by clicking a link in an email or text.
Your bank will never ask for your full PIN or passwords: and it will never ask you to move money to keep it safe.
Use a card for online shopping: paying by credit card generally gives more protection than a bank transfer. See the Safe Online Shopping Guide.
Keep your email account well protected: it is the key to all your other accounts, because password reset messages go there. Give it a long, unique password and two-step verification.
Be careful with Wi-Fi: make sure your home Wi-Fi has a password, and avoid banking on free public Wi-Fi in cafes. See the Securing Your Home Router Guide.

Helping an older relative or friend

If you are a son, daughter, neighbour or carer, your role matters. Age UK points out that the emotional impact of a scam can be as serious as the money lost, and that shame often stops people telling anyone.

Talk about scams as normal news: "Have you had any of those fake parcel texts?" is easier than "You need to be careful".
Offer to set things up together: updates, call screening, a password manager and two-step verification, done side by side so they understand each step.
Agree the family password and the "call me first" rule: any request for money, from anyone, gets a phone call to you before it is paid.
Watch for changes: new "friends" online, secrecy about money, unusual parcels, cash withdrawals or a sudden interest in investments.
Never blame: people who feel judged hide the next scam. Praise them for telling you.

What to do if it happens

Call your bank straight away: dial 159 or the number on your card. Ask them to stop any payments and secure your account. Speed matters.
Report the crime: in England, Wales and Northern Ireland, report to Report Fraud (the service formerly known as Action Fraud) at reportfraud.police.uk or on 0300 123 2040. In Scotland, call Police Scotland on 101.
Change passwords: if you gave away a password, change it on that account and anywhere else you used it.
Remove anything installed: if you let someone onto your computer, disconnect it from the internet and ask a trusted person or repair shop to check it.
Watch your accounts and credit file: look for payments or new accounts you do not recognise. See the Identity Theft Recovery Guide.
Get support: tell someone you trust, and call the Age UK Advice Line if you want to talk it through.

Where to get help

In the UK:

Your bank: 159, or the number on your card.
Report Fraud (formerly Action Fraud): reportfraud.police.uk or 0300 123 2040 (England, Wales and Northern Ireland). Police Scotland on 101 in Scotland.
Age UK Advice Line: 0800 678 1602, free, 8am to 7pm, every day of the year. Over 120 local Age UKs also have specialist advisers.
Scam emails: forward them to [email protected] (run by the National Cyber Security Centre, NCSC).
Scam texts: forward them free to 7726.
Investment offers: the Financial Conduct Authority (FCA) consumer helpline on 0800 111 6768, and the FCA Firm Checker on the FCA website.
Citizens Advice: an online scam checker and advice on what to do if you have been scammed.

In the US:

FTC: report scams at ReportFraud.ftc.gov.
AARP Fraud Watch Network Helpline: 877-908-3360, Monday to Friday, 8am to 8pm Eastern Time. It offers guidance and emotional support to anyone targeted by a scam or worried about a loved one, though it does not investigate or recover money.
FBI Internet Crime Complaint Center (IC3): ic3.gov for online fraud.

Common failure patterns

Trusting the caller ID: the name or number shown can be faked. The FTC is clear that caller ID proves nothing.
Calling back the number in the message: it goes straight to the criminal. Always find the number yourself.
Keeping it secret: criminals often say "do not tell your bank" or "do not tell your family". That instruction alone tells you it is a scam.
Paying a fee to get money back: people who have been scammed are often contacted again by "recovery" firms. These are usually the same criminals.
Leaving updates switched off: an out-of-date phone or computer is far easier to break into.
Waiting before reporting: embarrassment delays the call to the bank, and every hour makes money harder to trace.

Practitioner checklist

A simple checklist to work through, alone or with someone you trust:

Write 159, the Age UK Advice Line (0800 678 1602) and Report Fraud (0300 123 2040) on a card by your phone.
Agree a family password with close relatives.
Agree the rule: any request for money gets a phone call to a trusted person first.
Turn on automatic updates on your phone, tablet and computer.
Turn on call screening or spam filtering on your phone, and save important numbers in your contacts.
Set up two-step verification on your email and banking.
Consider a password manager so every account has its own password.
Remember: never pay by gift card, cryptocurrency or transfer to a "safe account".
If something goes wrong, call your bank first, then report it.

For organisations, see the Fraud Prevention Guide for Digital Businesses.

Cybersecurity for Seniors Guide: Plain-English Steps to Stay Safe