Bringing everything together into one practical checklist can make online safety feel far more manageable than tackling it all at once. This organizes the most important protective steps into clear categories, so families can work through them at a comfortable pace rather than feeling overwhelmed trying to do it all immediately.
Start With Conversation, Not Tools
- [ ] Have an open, non-judgmental conversation about scams, framed around shared vulnerability rather than assumed incapability
- [ ] Ask about current habits: how do they usually handle unexpected calls, emails, or texts?
- [ ] Establish a “no judgment, just call me” agreement for anything that feels uncertain
- [ ] Agree on a family safe word for verifying real emergencies
Phone Protection
- [ ] Set up spam call blocking (Silence Unknown Callers on iPhone, or Caller ID and spam protection on Android)
- [ ] Enable carrier-level spam filtering (AT&T ActiveArmor, T-Mobile Scam Shield, Verizon Call Filter, or equivalent)
- [ ] Talk through common phone scam scripts together — government impersonation, tech support scams, grandparent scams
Device and Account Security
- [ ] Confirm antivirus protection is active (built-in options like Microsoft Defender are a reasonable baseline)
- [ ] Set up two-factor authentication on email first, then banking and other important accounts
- [ ] Set up a password manager, and gradually update any obviously weak or reused passwords
- [ ] Turn on automatic software updates for the operating system and browser
- [ ] Set up a backup system (cloud, external drive, or both) to protect against ransomware and device loss
Financial Protection
- [ ] Freeze credit at all three bureaus (Equifax, Experian, TransUnion) — free, and one of the strongest available protections
- [ ] Set up a trusted contact on banking and brokerage accounts
- [ ] Turn on transaction alerts through the bank or card issuer
- [ ] Review credit reports periodically through AnnualCreditReport.com
- [ ] Talk through which payment methods are safe (credit card) versus which to never use for unfamiliar requests (gift cards, wire transfers, cryptocurrency)
Identity Monitoring
- [ ] Check whether an email address has shown up in any known data breaches (Have I Been Pwned)
- [ ] Decide together whether free monitoring tools are enough, or whether a paid identity theft protection service makes sense
- [ ] Review Medicare Summary Notices and insurance statements periodically for unfamiliar charges
Ongoing Habits, Not One-Time Fixes
- [ ] Revisit the conversation periodically, especially when a new scam trend hits the news
- [ ] Check in on account security and settings every few months, rather than assuming a one-time setup is permanent
- [ ] Reassess the balance between independence and oversight as circumstances change over time
- [ ] Keep a simple, accessible list of who to call if something feels wrong — a specific family member’s number, the bank’s fraud line, and the FTC reporting site
If Something Does Go Wrong
- [ ] Respond with calm support, not blame or frustration
- [ ] Act quickly: contact the bank or card issuer, freeze credit if personal information was involved
- [ ] Report the scam to reportfraud.ftc.gov and, if relevant, the DOJ Elder Fraud Hotline at 1-833-FRAUD-11
- [ ] Watch for follow-up “recovery” scams targeting people who’ve already lost money
- [ ] Support the emotional aftermath, not just the financial and practical steps
A Realistic Approach to Using This Checklist
Trying to knock out every item in one sitting is likely to overwhelm everyone involved. A more sustainable approach:
Start with the highest-impact, lowest-effort items — a credit freeze and phone spam blocking cost nothing and take only minutes, but address two of the most common risk areas right away.
Work through the rest gradually, maybe one category per conversation or visit, rather than attempting the whole list at once.
Revisit periodically rather than treating this as a single event — online safety is an ongoing practice, not a project with a fixed end date.
The Bottom Line
This checklist pulls together the most effective, practical protections into one place — but the real value comes from working through it together, at a comfortable pace, with ongoing conversation rather than one overwhelming session. Starting with the free, high-impact steps (a credit freeze, phone spam blocking, a family safe word) gives meaningful protection right away, with the rest building naturally from there.
Note: This article is for general informational purposes and summarizes guidance covered in more detail throughout this site. If you or a family member has been the victim of a scam, contact your bank immediately and report it to reportfraud.ftc.gov.