Newsletter Subscribe
Enter your email address below and subscribe to our newsletter
Online safety for seniors is usually about prevention. But plenty of people land on this page after the fact, because they already clicked, already paid, or already answered questions they wish they hadn’t.
If that’s you, skip the rest of this page for now and work through the list below instead. It’s in this order for a reason. The first few hours matter more than anything else you’ll read today.
One last thing, and it catches more people than you’d expect. Someone may contact you offering to recover your money for a fee paid up front. That’s not a rescue. Scam victims get resold to other scammers as a list, so the recovery service is usually the same crew coming back for whatever’s left.
Senior Tech Café explains online safety for seniors in plain language, without assuming you already know what a phishing email looks like or that you find any of this remotely interesting.
This page is the front door. Every topic below tells you what the risk actually is, what to do first, and where to go if you want the whole story.
You don’t have to read all of it. Nobody reads a safety library front to back, the same way nobody reads an insurance policy for pleasure. Come in through whichever door matches the thing bothering you this week.
We check these steps against current guidance from the Federal Trade Commission, the Cybersecurity and Infrastructure Security Agency, the National Cybersecurity Alliance, and the AARP Fraud Watch Network. When their advice changes, this page changes.
Online safety covers a lot of ground, and most of it won’t apply to you today. So start with whatever’s actually bothering you.
That’s fourteen categories, which is a lot to take in at once. Pick the one that describes your week. The other thirteen aren’t going anywhere.
Scam messages work by making you act before you think. Nearly all of them manufacture a reason to hurry: a suspicious charge, a package problem, a prize with a deadline, a grandchild in trouble.
That hurry is the whole trick. A real bank will happily let you call back. A scammer can’t afford it, because the moment you slow down and check, the story falls apart.
So don’t use the phone number or the link in the message. Look the company up yourself, on your statement, on your card, or by typing the address into your browser.
For a family emergency, call somebody else in the family first. A safe word helps too. One short word your family agrees on in advance, which a stranger holding an AI voice clone won’t know.
And no real prize has ever required taxes up front, gift cards, cryptocurrency, or a fee. If someone needs money before you can collect your winnings, you haven’t won anything.
Scam-spotting videos and apps are entertaining, and a few are genuinely useful. None of them replaces looking it up yourself.
Artificial intelligence can now produce a polished website, realistic product photos, and a hundred glowing reviews in roughly the time it takes to make coffee.
Which means a professional appearance doesn’t prove anything anymore. It used to be a decent signal. Now it’s the cheapest part of the entire operation.
So check the things that are still expensive to fake. Compare a claim against its original source. Search the seller somewhere they don’t control the page. Look at when the site was registered and who owns it.
Specific evidence beats repeated praise. Fifty reviews saying “great product, fast shipping” tell you less than one review describing exactly what showed up and how the company handled the return.
A pause isn’t cynicism. It’s the habit that keeps a good-looking page, or a very friendly chatbot, from rushing you.
Use a different long password for every account that matters. Then stop trying to memorize them, because that’s the part no human can actually do.
A password manager (an app that stores them for you) handles it. So does a notebook, as long as the notebook isn’t sitting next to the computer.
Why bother? Because one password used everywhere means one leak opens everything. Your email, your bank, and that craft store you ordered from once in 2019. It’s usually the craft store that gets breached.
Turn on two-factor authentication next, starting with email, then banking, then social media. It asks for a second piece of proof before letting anyone in, so a stolen password on its own stops being enough.
Install updates when your phone or computer asks. They’re not new features. They’re the locksmith coming to change a lock that somebody already worked out how to pick.
On public Wi-Fi, browse. Don’t bank. Save that for your own network or your cellular data.
And if you’re ever locked out or hacked, go to the provider’s official recovery page and start there yourself. Anyone who contacts you first, offering to fix it, is the second half of the scam.
Your digital footprint is everything you’ve posted, every account you’ve opened, every permission you’ve granted, and a surprising amount collected while you were just reading the news.
You can’t erase it. You can slow it down considerably.
Delete the accounts you no longer use. Check who can still see your social media. Turn down nonessential cookies whenever a site actually gives you the choice.
Then look at app permissions, which is where most of the surprises live. Plenty of apps ask for your location, contacts, microphone, and photos because asking is free, not because they need any of it. A flashlight app has no business knowing where you are.
One thing worth clearing up: private browsing keeps your history off the device after you close the window. That’s all it does. Your internet provider, your employer, your school, and the websites themselves can all still see you. It’s a closed door, not an invisibility cloak.
For anything sensitive going out by email, use the security options your provider already offers, and read the address line twice before you send.
Three situations cause most of the trouble, and each one has a single habit worth building.
Before you buy from a seller you don’t know, check the spelling of the web address and search the business name alongside the word “complaint.” Then confirm there’s a real return policy and a way to reach a human.
Pay by credit card when you can, because a credit card will fight it for you.
On social media and dating sites, hold the personal details back until trust is earned, and slow right down the moment money comes up. Real affection has never once needed a wire transfer by Friday.
When you travel, keep your tickets and ID close, wait until you’re home to post the vacation photos, and carry a paper copy of the numbers you’d need in a hurry. A phone in the back of a foreign taxi is a poor place to keep the only copy of anything.
Keep this list somewhere you’ll actually see it.
A list taped inside a cabinet door beats one saved in a folder you’ll never open again.
Print this page and keep the checklist near the computer or phone. One pause and one second opinion stops most of the scams that reach you.
You don’t have to take our word for any of this.
The Federal Trade Commission keeps current scam guidance at consumer.ftc.gov/scams. The Cybersecurity and Infrastructure Security Agency runs cisa.gov/secure-our-world.
For identity theft, identitytheft.gov builds you a recovery plan. The National Cybersecurity Alliance is at staysafeonline.org, and the AARP Fraud Watch Network at aarp.org/money/scams-fraud.
Those five are the sources behind every step on this page.
Bookmark one or two now, while nothing’s wrong. It’s much easier than finding them on the day something is.
The most important online safety tips for seniors are habits, not technical skills. Pause when a message is urgent. Verify requests using a number you already trust, never the one you were sent. Use a different password for every account, turn on two-factor authentication, install updates, and check with someone you trust before sending money.
If you think you’ve been scammed online, stop contact, then call your bank using the number printed on your card. Secure whatever account they reached, change any password you reused, and save the messages and receipts. Report it at ReportFraud.ftc.gov, and use IdentityTheft.gov if they got enough to impersonate you. Speed matters more than doing it perfectly.
Public Wi-Fi is fine for reading the news, checking the weather, or killing an hour in an airport. It’s the wrong place for banking, email, shopping, or account recovery, so save those for your home network or your cellular data. Treat the coffee shop network like a crowded table: fine for small talk, wrong for account numbers.
Start with the Federal Trade Commission, CISA’s Secure Our World, IdentityTheft.gov, the National Cybersecurity Alliance, and the AARP Fraud Watch Network. They’re all free and none of them will try to sell you anything. Your public library is the one people forget. It’s local, it’s staffed by humans, and you can walk in with your own phone and your own question.