AI Safety (New for 2026)
CRITICAL: AI can now clone voices and faces. You can no longer trust your ears or eyes on a digital call.
- Establish a Family "Safe Word": If a loved one calls you in distress (even if it sounds exactly like them), ask for the safe word. AI cannot guess a secret word you agreed upon offline.
- Video is Not Proof: Deepfake video calls are now common. If a video call from a "boss" or "family member" asks for money or passwords, hang up and call them back.
- Beware of "Perfect" Grammar: Scams used to have typos. AI writes perfect English. Stop looking for bad spelling; start looking for suspicious requests.
Logins & Passkeys
ACTION: Switch to PASSKEYS wherever possible (Google, Apple, Amazon).
- Stop Using Passwords: Passkeys use your face or fingerprint to log in. They are impossible to phish. Enable them in your account settings.
- If You Must Use Passwords:
- Use a Password Manager (e.g., 1Password, Bitwarden).
- Never reuse a password. EVER.
- Make them long: horse-battery-staple-correct is better than Tr0ub4dor&3.
- 2FA (Two-Factor Authentication):
- Good: Authenticator Apps (Google Auth, Authy).
- Best: Hardware Keys (YubiKey).
- Avoid: SMS text codes (Sim-swapping makes these risky).
Email is insecure by default. Treat it like a postcard anyone can read.
- Zero Trust for Links: If an email asks you to "Click here to verify account," DO NOT CLICK. Navigate to the website manually.
- Don't Scan QR Codes in Email: "Quishing" (QR Phishing) is rising. Scammers use QR codes to bypass spam filters.
- Never Email Sensitive Data: No SSNs, Credit Cards, or IDs. If you must send a file, use an encrypted link (like Signal or a password-protected cloud link).
Phone & SMS
WARNING: "Pig Butchering" scams start with a friendly "wrong number" text. Do not reply.
- Silence Unknown Callers: Use your phone settings to send unknown numbers straight to voicemail. If it's important, they will leave a message.
- The "Wrong Number" Trap: If you get a text saying "Is this Sarah? Let's meet for golf," it is a scam script. Delete it. Do not be polite.
- Spoofing: Your Caller ID can lie. A call saying "IRS" or "Apple Support" is fake. Hang up and look up the official number.
Online & Data Privacy
- Audit Browser Extensions: Many extensions are sold to malware companies. Only install extensions you strictly need.
- Data Removal: Scammers use "People Search" sites to find your info. Consider using a data removal service to scrub your home address and relatives' names from the web.
- Digital Estate: Set up a "Legacy Contact" (Apple/Google) so your family can access your photos/data if something happens to you.