These five rules will block almost every scam in existence:
Rule 1: Never give a password or code.
No real company will ever ask you for your password, PIN, or verification code. Not by phone, not by text, not by email. Ever. If anyone asks — it's a scam, 100% of the time.
Rule 2: Verify by calling back.
If "your bank" calls about a problem, hang up. Call the number on the back of your card. Real companies don't care if you verify — scammers do.
Rule 3: If they want gift cards or crypto, it's a scam.
No legitimate company, government agency, or tech support person asks for payment in gift cards or Bitcoin. 100% scam, no exceptions.
Rule 4: Slow down.
Every scam pushes urgency. Every response to a scam is "give me 10 minutes to check." If they push back on that, it's definitely a scam.
Rule 5: Check with an adult you trust.
Before sending money to anyone online, tell a parent, teacher, or older sibling. Scammers fear daylight. If something can't survive a quick conversation with a trusted adult, it's not legit.
Special teen threats to watch for:
Romance scams — new "online friend" who eventually asks for moneyJob scams — "work from home" offers that want upfront feesGaming scams — Discord DMs offering free skins/items for account infoCrypto scams — "guaranteed returns" in any cryptocurrencyDeepfake calls — "your friend/cousin" calling in a crisis (always verify with a callback)If you get scammed: Tell a parent immediately. Don't feel embarrassed — scammers are professionals at what they do, and even smart adults get tricked. Fast action can sometimes recover the money. Slow or hidden action usually can't.