Cybersecurity is the practice of protecting your devices, accounts, and personal information from people who want to misuse them. This covers everything from your smartphone and laptop to your email inbox, online banking, and social media profiles.

Today, the internet touches nearly every part of daily life. We use it to video call family, manage bank accounts, book medical appointments, shop, and stay informed. That convenience is real — but so is the risk. Scammers and cybercriminals are active, creative, and increasingly focused on older adults, who are statistically targeted more often than other age groups.

The good news: you don’t need to be a tech expert to protect yourself. Awareness and a few simple habits go a long way.

How Cybercriminals Think

Criminals online rely on the same tactics they’ve always used in the physical world — deception, urgency, and trust. What’s changed is that the internet gives them anonymous reach and powerful tools to make their scams look convincing.

Common targets for older adults include fake charity appeals, phishing emails pretending to be from Medicare or the Social Security Administration, romance scams on social media and dating platforms, fraudulent online pharmacies, and fake tech support calls claiming your device has a virus.

Rules of the Road for Staying Safe Online

Guard Your Personal Information

Never share your name, address, Social Security number, Medicare ID, bank account details, insurance policy numbers, or passwords with anyone online unless you initiated the contact and are certain who you’re dealing with. Legitimate organizations — banks, government agencies, hospitals — will never ask for sensitive information over email or text out of the blue.

Think Before You Click

If you receive an email, text, or social media message with a link or attachment you weren’t expecting, don’t click it. This is one of the most common ways criminals gain access to your device or accounts. When in doubt, go directly to the organization’s official website by typing the address into your browser yourself.

Be Skeptical of Anything “Free”

Offers of free prizes, gift cards, vacation packages, or sweepstakes winnings are almost always a setup designed to collect your personal information. If something sounds too good to be true, it is.

Verify Before You Trust

Just because a website, email, or caller looks or sounds official doesn’t mean it is. Scammers today can fake logos, phone numbers, and even government agency names convincingly. If you get an unexpected call from someone claiming to be from the IRS, Social Security, or Medicare — hang up and call the agency directly using a number from their official website.

Protecting Yourself in Specific Situations

Online Banking

Always look for “https://” at the beginning of a banking website’s address — that “s” means the connection is encrypted. Never access your bank account from a public Wi-Fi network (like at a coffee shop or library) unless you’re using a VPN. Set up account alerts with your bank so you’re notified of any unusual transactions immediately.

Online Shopping

Use a credit card rather than a debit card for online purchases. Credit cards offer stronger fraud protections, and disputing a charge is much easier than recovering money that’s been withdrawn from a bank account. Check your statements regularly — at least weekly — and report anything unfamiliar right away.

Medical Information Online

When researching health topics, stick to websites ending in .gov (like nih.gov or cdc.gov) or .edu. Be cautious of health websites that exist primarily to sell supplements, medications, or treatments. Always consult your doctor before acting on medical information found online.

Social Media

Adjust your privacy settings so that only people you know can see your posts, photos, and personal details. Be cautious about accepting friend or connection requests from people you don’t recognize — romance scams frequently begin this way. Avoid posting information like your birthday, home address, or vacation plans publicly.

Modern Threats to Know About

The original CISA document “Cybersecurity and Older Americans” part of the “Stop.Think.Connect” program was written before several threats became widespread.

Here are a few you should be aware of today:

AI-Generated Scams. Criminals now use artificial intelligence to create highly convincing fake emails, voices, and even video calls. A scammer might clone a family member’s voice to call and claim they’re in trouble and need money wired immediately. If you receive an urgent, unexpected request for money — even from a voice that sounds familiar — hang up and call that person back on a number you already know.

Smishing (SMS Phishing). Scam texts pretending to be from UPS, Amazon, your bank, or the IRS are now extremely common. Don’t click links in unexpected text messages, even if they look official.

Multi-Factor Authentication (MFA). Nearly every important online account now offers the ability to require a second form of verification — usually a code sent to your phone — when logging in. Turn this on wherever it’s available. It’s one of the most effective protections you have.

Password Managers. Using the same password for multiple accounts is a serious risk. A password manager (like Bitwarden or the one built into your iPhone or Android) creates and stores strong, unique passwords for every account so you don’t have to remember them all.

If Something Goes Wrong

If you believe you’ve been the victim of an online scam or cybercrime:

• Report it to the FBI’s Internet Crime Complaint Center at ic3.gov
• Contact the FTC at reportfraud.ftc.gov
• Call your bank immediately if financial information was shared
• Tell a trusted family member or friend — there is no shame in being targeted; these scams are professionally designed to deceive

Acting quickly can limit the damage significantly.

Help Spread the Word

Cybersecurity is a community effort. If you’ve learned something from this guide, share it. Talk to friends, family members, and neighbors — especially those who may be less comfortable with technology. Consider asking your local library, community center, or senior center to host a cybersecurity awareness session. One conversation can prevent a devastating scam from happening to someone you care about.

Staying safe online doesn’t require technical expertise. It requires the same skepticism and common sense you’ve applied to the real world your entire life — just applied in a new environment.

It is not a matter of “If” it’s a matter of “When”

• Resources for further information
  • AARP https://www.aarp.org/money/scams-fraud/
  • FBI https://www.fbi.gov/how-we-can-help-you/scams-and-safety/common-frauds-and-scams/elder-fraud