Technology

Online Safety and Scam Prevention

Meets Tuesdays · 10:00 AM - 11:30 AM · on Zoom 14 enrolled Free to audit

This class is for anyone who's tired of second-guessing every email, text, and phone call. We meet Tuesday mornings and we work hands-on, in the room, not just talk about things in the abstract.

Sooo here's what you'll actually leave with: you'll know how to spot a phishing email, hang up on the fake tech support call, and check a link before you tap it. You'll set up a password manager and get two-factor login working on your own accounts, with backup codes first.

Most scams work because people feel rushed. Slow down and you win. The people who fall for these aren't foolish, they're busy or caught on a bad day. Bring your phone and your laptop.

What you'll learn

Spot urgency tactics scammers use to rush you
Check links and sender addresses before clicking
Set up and use a password manager confidently
Turn on two-factor authentication for email and bank
Build a one-page reference sheet of safety habits

Materials & tools

What to bring

Your everyday smartphone, unlocked and updated, plus its charger — this is the device most scams target, so setup happens on it
A laptop or tablet you use for email and banking, charged and brought to class
The login email address and password for your main email account (email is the "master key" that resets everything else) — free
A short handwritten list of your most important accounts: email, bank, credit card, Amazon/shopping, social media — free
A small notebook and pen for writing down recovery info and backup codes offline — $2–5
Reading glasses if you use them (a lot of scam detection is reading fine print in a URL) — free

Nice to have

A password manager account, set up before or during class — Bitwarden free tier is $0; paid managers (1Password, Dashlane) run ~$36/year
A free authenticator app already installed (Google Authenticator, Microsoft Authenticator, or Authy) for stronger two-factor login — free
A USB flash drive or a sealed envelope to store printed backup codes somewhere safe — $5–10
A second "burner" email address for newsletters and store signups to keep your main inbox cleaner — free

Lessons

How scams work and why anyone can fall for one
The core tell, who really gets caught, and setting up a notebook to sort scams by how they hook you.
Spotting bad texts, emails, and links
Reading suspicious messages, hovering to check links, spoofed addresses, and practicing on real examples.
When the phone rings: fake support and bank calls
Handling the fake virus call, keeping strangers off your computer, and hanging up to call your bank directly.
Passwords and setting up a password manager
Why memorable passwords are weak, checking for breaches, and installing a password manager that actually works.
Turning on two-factor without the headache
Backup codes, why text 2FA is fine, switching it on for email and bank, and surviving a phone change.
The newer cons, and the habits that protect you
Romance scams, AI voice cloning, why habits beat antivirus, and a one-page cheat sheet for your desk.

Key terms

Phishing: A scam that uses fake emails, websites, or messages disguised as a trusted source to trick you into giving up passwords, account numbers, or money.
Smishing: Phishing carried out through text (SMS) messages, such as a fake delivery or bank alert with a link to tap.
Vishing: Voice phishing done over the phone, where a caller pretends to be tech support, your bank, or a government agency to pressure you into acting.
Two-Factor Authentication (2FA): A login safeguard that requires a second proof of identity — usually a code from your phone or an app — in addition to your password.
Password Manager: A secure app that generates, stores, and fills in a unique strong password for each of your accounts so you only have to remember one master password.
Backup Codes: One-time recovery codes a service gives you to log in if you lose access to your phone or authenticator app; they should be saved offline.
Malware: Malicious software — including viruses, spyware, and ransomware — that can be installed by clicking a bad link or attachment and can steal data or lock your device.
Spoofing: Faking the sender information on an email, text, caller ID, or website address so a scam message appears to come from someone you trust.
Social Engineering: Manipulating a person through urgency, fear, or trust — rather than hacking a computer — to get them to hand over information or money.
URL (Web Address): The address of a web page; checking the real domain in a URL before clicking is one of the simplest ways to catch a fake site.