How To Protect a Relative With Limited Tech Literacy From Scams
Practical ways to help a family member who is less comfortable with technology spot and avoid online and phone scams.
Last reviewed: 1 June 2026
Not everyone grows up with technology, and that is not a character flaw. Family members who are less confident online can face greater risk from tech-support scams, phishing emails, and fake pop-ups — simply because the warning signs are harder to recognise without prior experience. Patient, supportive help makes a real difference.
Understand their specific vulnerabilities
Scams that succeed against less tech-savvy relatives usually exploit unfamiliarity with how legitimate organisations actually communicate, not a lack of intelligence or judgement. Someone who doesn't regularly use online banking may not know that a real bank will never ask for a full password or a one-time code over the phone, and someone unfamiliar with how pop-ups work may genuinely believe a browser warning claiming 'your computer is infected, call this number now' is a real system message rather than a scam. The fix isn't a crash course in technology — it's a handful of specific, concrete facts about how real organisations behave, which is often more useful than general advice to 'be careful online.'
- Tech-support popup scams: alarming browser alerts claiming a virus must be removed by calling a number
- Phishing emails that look official but come from suspicious addresses
- Fake parcel delivery texts, since online shopping is increasingly common
- Banking impersonation calls, where the caller seems credible because they know account details
Build simple, memorable rules
Under pressure — a scary phone call, an urgent pop-up, a message claiming an account will be closed — complex advice is hard to recall, so a small number of simple, repeatable rules work far better than a long list of tips. Good examples include: a real bank or government department will never ask you to move money to a 'safe account,' never buy gift cards to pay a bill or fine, and if anyone calls asking you to act urgently, hang up and call them back using a number you already have, not one they give you. Write these down in large print somewhere visible, like by the phone, so they're there to check even under stress.
- Rule 1: No real company needs you to call a number that appeared in a pop-up
- Rule 2: Always call me before clicking a link or calling a number from an email or text
- Rule 3: If in doubt, close the browser and restart the device — this fixes most fake 'virus' scares
- Rule 4: Legitimate organisations do not need your password
Set up their device securely
A handful of one-time changes significantly shrink the technical attack surface without requiring ongoing technical skill from your relative. Turn on automatic software and security updates so known vulnerabilities get patched without anyone needing to remember, install a reputable ad and pop-up blocker to reduce the scary fake 'virus detected' messages that trick people into calling fraudulent support numbers, and set up two-factor authentication on email and banking apps where offered, since this alone stops most account takeovers even if a password is stolen. If they use the same password across multiple accounts, help them move to unique passwords for banking and email specifically, even if other accounts stay as they are, since those two matter most.
- Enable automatic operating-system and browser updates
- Install a reputable security package with phishing-site blocking
- Set up a bookmark for their bank rather than letting them search each time
- Enable two-factor authentication on email and online banking
Conversation script
“I just want to show you one thing — if your computer ever shows a scary pop-up with a phone number, the number is fake. You don't need to call it. Just close the window.”
“Can I set up a bookmark for your bank? That way you never need to search for it and land on a fake site.”
“Whenever something on the computer worries you, just call me before you do anything. There is no problem I can't help with.”
Frequently asked questions
What if they are too embarrassed to ask for help when something seems wrong?
Frame it proactively: agree in advance that calling you is the normal thing to do whenever something technical looks odd. Removing the need to admit confusion makes it much easier to ask.
Is a pop-up saying my computer has a virus dangerous?
Pop-up alerts in a web browser claiming to detect a virus are almost always fake. They are designed to make you call a number and pay for fake 'tech support'. Close the tab or browser. If the pop-up cannot be closed, restart the device. A real antivirus alert appears as a system notification, not a website pop-up.