You won a lottery by text

A text says Apple, Google, or “the government” picked your number. It names a huge prize and a “claim manager.” It asks for your name, address, age, and a call back.

Apple does not run a text lottery. Real prizes do not ask for your address over a random number. If you answer, they ask for a “release fee,” a gift card, or a code from your bank.

• Do not reply. Do not call the number in the text.
• Do not send your name, address, or age.
• Delete the text. If you already answered, text me a photo of it.

Gift cards as “payment”

Someone claiming to be the IRS, the sheriff, the utility, Apple, or a relative says you must pay right now with Target, Walmart, iTunes, Google Play, or Steam cards. They stay on the line while you drive to the store, then ask you to read the numbers off the back of the cards.

No government office, bank, or real company takes gift cards. Those numbers are the same as handing over cash that cannot be traced.

• Hang up. Do not buy the cards.
• If you already bought them, do not read any numbers to anyone.
• Call the number on the back of the card about a freeze. Then text me.

Fake package or postage text

A text says USPS, UPS, FedEx, or Amazon is holding a package. There is a small fee, often $1.99 to $3.99, and a short link. The page looks official. It asks for a card “to release the shipment.”

Carriers do not collect random postage in a text. The site is there to steal the card and sometimes the login to your email.

• Do not tap the link.
• Open the real carrier app yourself, or check the order on the store’s site.
• If you already typed a card, call the number on the back of that card first, then text me.

The “Microsoft / Apple virus” call

A pop-up fills the screen: “Your computer is infected. Call this number.” Or a person calls, says they are from Microsoft, Apple, McAfee, or “Windows Support,” and asks you to install AnyDesk, TeamViewer, or “allow screen sharing.” They may say there is a refund, then “accidentally” overpay and ask you to send money back.

Apple and Microsoft do not cold-call. A real pop-up from your computer does not include a phone number to call. Once they are on the screen they can see banks, passwords, and email.

• Do not call the number on the pop-up.
• Do not install remote-access software for a stranger.
• If someone is already on the computer, turn the computer off. Unplug it if you need to. Then text me.

Grandparent / family emergency

The voice says they are a grandchild, nephew, or “a lawyer calling for your grandson.” There was a crash, an arrest, or a hospital bill. They ask you not to tell the rest of the family. They want bail, a hotel, or a lawyer paid by wire, crypto, or gift cards, today.

Scammers use fear and secrecy. Some now clone a voice from a short social-media clip. The story falls apart if you call the person on a number you already have.

• Hang up. Call your family member on the number already in your phone.
• Agree on a family code word before you need it. Ask for that word.
• If you already sent money, call your bank the same day and text me.

“Your account is locked. Click here.”

An email or text looks like Bank of America, Chase, Social Security, Netflix, or your email provider. It says the account will close in 24 hours unless you confirm a password, a code, or a Social Security number. The address is off by a letter, or the link does not match the real site.

They want the password or the one-time code from your phone. With that they can empty the account or lock you out of email, which is how they reset everything else.

• Do not use the link in the message.
• Type the real site yourself, or use the number on the back of the card.
• If you already typed a password or a code, change it from a page you opened yourself, then text me.

Phishing email

The name at the top says Chase, Apple, Microsoft, or the IRS. The real address is not that company. The mail wants a tap, a password, or an attachment opened.

• The name says a company. The address after it is Gmail, a look-alike, or something you never saw.
• It says Dear Customer, mailbox full, password expires, or refund ready.
• It wants a click, a login, or “Enable editing” on an attachment.
• It rushes you. A real bank mails a letter or uses the app you already have.

• Do not tap the link. Do not open the attachment.
• Do not call a number printed in the email.
• Open the real app or type the address yourself.
• If you already typed a password, change it from a page you opened yourself, then text me.

Romance and “investment help”

Someone you met on Facebook, a dating app, or in comments becomes very attentive. After weeks they mention a sure investment, crypto, gold, or a “platform” that needs one more deposit. Or they cannot visit because of a sudden hospital or customs fee.

The person on the other end is a script. Money sent this way almost never comes back. They will ask for more after the first payment.

• Do not send money, crypto, or gift cards to someone you have not met in person.
• Show the messages to a person you already trust.
• I already sent money, call the bank and text me the same day.

Utility shutoff and “warrant”

A call says DWP, SoCal Gas, or the sheriff will shut off power or serve a warrant in an hour unless you pay. They want a prepaid card, a wire, or a cash drop. Caller ID may even show a local-looking number.

Utilities send a letter and give you time. Police do not collect bail over the phone. Caller ID is easy to fake.

• Hang up. Call the number printed on a real bill, not the number that just rang.
• If a “warrant” is the story, call your local station on a number you look up yourself.

QR codes on tickets, meters, and flyers

A parking sign, a “pay here” sticker, a concert ticket text, or a flyer asks you to scan a code. The page that opens asks for a card. Sometimes a cheap sticker was placed over the real one.

The code can send you anywhere. You cannot tell the destination from the picture of the square.

• Do not scan a code that appeared suddenly or looks taped on.
• Pay in the official city or venue app, or at a staffed window.
• If you already scanned one, do not enter a card. Text me a photo of the sign.

Unpaid toll or FasTrak text

A text says you owe a few dollars on FasTrak, E-ZPass, or Metro ExpressLanes. Pay the link or your license is at risk. This is one of the most common texts in California right now.

FasTrak and the DMV do not collect through a surprise text link. The page is built to take a card.

• Do not tap the link.
• Open the FasTrak or DMV app yourself, or type the real address.
• If you already typed a card, call the number on the back of the card.

“Hi, how are you?” from a stranger

A new number says Hi, Hey, or “Is this still available?” If you answer, they know the number is live. Then it turns into romance or a fake investment.

A real mix-up does not need a long chat. The goal is to get a reply, then a friendship, then money.

• Do not reply. Delete it.
• If you already replied, stop answering. Do not send photos or money.

Fake job or “easy tasks”

A text offers work from home or $200 a day rating products. The first jobs pay a little. Then they ask you to send money to unlock the rest.

Real employers do not hire by surprise text and do not ask you to pay them first.

• Do not reply START.
• Do not send money to “unlock” pay.
• If you already sent some, freeze the card and text me.

If money or a password already left

This happens to careful people. Speed matters more than embarrassment.

Those follow-up texts are a second scam. Do the real steps below.

• Call the bank or card number on the back of the card. Ask to freeze the card and reverse the charge if you can.
• If email or a password was typed on a fake page, change that password from a page you opened yourself.
• Turn the computer off if a stranger is still “on” it.
• Text me at (213) 537-6547. Tell me what you clicked and what you sent. We will go in order.

Do not tap a link you did not expect

Why The words can say USPS or Chase. The tap can still open a fake page that copies the real site. Once you type a password or a card there, they have it.

Do this instead Close the text. Open the app you already use, or type the address yourself from a bill. A real bank, the post office, and Medicare can wait for that.

Do not open mail from people you do not know

Why The name at the top can say Apple. The real address can be a Gmail account or a look-alike. An attachment can lock the computer or steal a password when you tap Enable editing.

Do this instead Look at the address after the name. If you were not waiting for that mail, delete it. If it might be real, call the company on a number you already have.

Do not text back “hello”

Why Scammers send Hi to thousands of numbers. A reply tells them a person is there and that the number is good. Then comes the friendship, then the investment, then the ask for money.

Do this instead Delete it. Do not correct them. Do not say “wrong number.” Silence is the whole defense.

Never say “yes” to a stranger

Why A recording of you saying “yes” can be played later as if you agreed to a charge or a card. “Is this Mary?” and “Can you hear me?” are built to get that one word.

Do this instead Hang up. If it matters, they can leave a voicemail. You call back on a number you already have.

Do not read a code from your phone

Why That 6-digit text is the spare key to your email or bank. Anyone who has the key can reset the password while they keep you on the line. A real company that already knows you will not call and ask you to read it.

Do this instead Hang up. If you are worried, open the bank app yourself and look. Never read the code aloud.

Do not let anyone on your computer

Why AnyDesk, TeamViewer, and “allow screen control” hand them the mouse. They can open the bank, change the email, and tell you they are “refunding” you while they empty the account.

Do this instead Hang up. Apple, Microsoft, and your bank do not start that call. If they are already on the screen, turn the computer off.

Do not pay with gift cards or crypto

Why Gift card numbers and Bitcoin move like cash. There is no “undo” button at the bank. That is why a fake IRS agent, sheriff, utility, or grandchild always wants those, not a normal bill.

Do this instead Stop. Do not buy the cards. Do not read numbers you already bought. A real office takes a check or a card they bill themselves.

Do not scan a surprise square code

Why Your phone cannot tell a real city meter from a sticker taped over it. The square is only an address. It can open a page that takes a card.

Do this instead Pay in the official app or at a staffed window. If a sign appeared overnight, treat it as fake.

If they rush you, stop

Why Fear shuts off the part of the brain that would call a daughter. “Do not tell Mom,” “pay in the next hour,” and “stay on the line” are the same trick in different clothes.

Do this instead Hang up. Sit down. Call a person you trust on a number already in the phone. A real emergency can survive a ten-minute check.

Call back on your number, not theirs

Why Caller ID is easy to fake. The number in the text is their number. Calling it only gets you the same stranger with a friendlier voice.

Do this instead Use a number on a bill, on the back of a card, or already saved as your sister. Type it yourself.

Guard your Social Security number

Why That number is the master key to tax returns, credit, and Medicare files. A thief who has it can open accounts that look like you for months before you see a letter.

Do this instead Leave the card at home. Do not read the full number to a caller, a pop-up, or a “new boss.” Medicare and Social Security will not call and ask you to confirm it.

A credit freeze is free

Why Equifax, Experian, and TransUnion are who lenders ask before they open a new card in your name. A freeze is a deadbolt on those three files. It does not cancel the cards you already have.

Do this instead Freeze all three. Do not pay a caller who sells a freeze. Open the Freeze your credit page here for the slow version, or type IdentityTheft.gov yourself.

Check your name once a year

Why A freeze stops most new credit. It does not show you what is already on the file. A loan you never signed can sit there until a letter arrives.

Do this instead Type AnnualCreditReport.com yourself. That is the official free report. Look for addresses, cards, and loans you do not recognize.

Lock the front door on your email

Why Email is how banks reset a password. If someone gets into Gmail, they can request a new bank password and delete the warning mail so you never see it.

Do this instead Use a long password you do not reuse. Turn on the extra code on your phone. Never read that code to a caller. If you need help turning it on, text me.

Ask the IRS for an IP PIN

Why Thieves file a fake tax return in your name, grab the refund, and leave you to spend months proving you are you. An IP PIN is a number the IRS asks for before they accept a return.

Do this instead Type IRS.gov yourself and look for IP PIN. Do not use a link from an email that says “your refund is ready.”

Shred the paper that has your name and numbers

Why A trash bag on the curb is still a file. Bank letters, Medicare summaries, and old cards are enough to open accounts or answer “security questions.”

Do this instead Tear or shred anything that would hurt you in the wrong hands. If you do not own a shredder, tear it small and mix it with wet food scraps.

Who these three are

They are not the government. They are not your bank. They are the three big companies that lenders call before they open a new card or loan in your name.

• Equifax
• Experian
• TransUnion

If a thief has your Social Security number, they try to open credit. The lender asks one of these three, “Does this look like them?” A freeze makes the answer “we cannot show the file.” Most new accounts then fail.

What a freeze is

Think of it as a deadbolt on your name. You still use the cards you already have. Your score does not drop just because you froze. Bills you already pay can keep going.

What it stops is most new credit: a new Visa, a new store card, a new personal loan a stranger tries to open.

What a freeze is not

• It is not a police report.
• It does not cancel your current cards.
• It does not stop someone who already has your card number from trying charges on that old card. That is why you still call the number on the back of the card.
• It is not the paid “credit monitoring” a caller tries to sell you. A freeze is free.

Freeze vs fraud alert vs lock

• Freeze: the strong lock. Lenders cannot see the file until you lift it. Do this at all three.
• Fraud alert: a note that says “be careful, this person may be a victim.” Weaker than a freeze. One bureau can pass it to the others.
• Credit lock: a product one bureau sells in its app. It is not the same as the free freeze the law gives you. Use the freeze.

You must do all three

A lender might check Equifax, or Experian, or TransUnion. If you freeze only one, the thief tries the other two. Set the same freeze at each.

How to place the freeze

Type these addresses yourself. Do not use a link from a text or a pop-up.

• The guided path: IdentityTheft.gov
• Equifax freeze: equifax.com and look for Credit Freeze
• Experian freeze: experian.com/freeze
• TransUnion freeze: transunion.com/credit-freeze

You will create a small login at each. Save those logins on paper in a drawer. You will need them later to lift the freeze.

When you want a new card or a car loan

You lift the freeze for a short time, or for one company, then you lock it again. That is normal. You are the one with the key.

If a store clerk says “we cannot pull credit,” that often means your freeze is working. You can lift it for a day from the same sites.

Look at the file once a year

Type AnnualCreditReport.com yourself. That is the official free report. You can get one from each bureau. Look for addresses, loans, and cards you do not recognize.

Hang up on anyone who sells this

A freeze does not expire like that. You do not pay a caller. You do not read your Social Security number to a stranger to “keep the freeze.”

What it is

A short word you and your family agree on when everyone is calm. It is not a password for a bank. It is a way to check that the person on the phone is really family.

Pick a good word

• One ordinary word you would not post on Facebook.
• Not a birthday, a pet name people know, or your street.
• Not the word “password” or your last name.

How to use it

• Tell family in person, or in a text you started.
• If someone calls in a panic, ask for the word first.
• If they stall, get angry, or change the subject, hang up.
• Call your family on a number already in the phone. Do not use a number the caller gives you.

What a fake call sounds like

A real grandchild who knows the word can say it. A stranger will guess, stall, or get mad.

iPhone or iPad

• Open this page in Safari. Chrome on iPhone cannot add it the same way.
• Tap the Share button (the square with the arrow up) at the bottom.
• Scroll the list and tap Add to Home Screen.
• The name can stay Safety Check. Tap Add.
• Look on the last home screen page for the new icon.

Android

• Open this page in Chrome.
• Tap the three dots in the top corner.
• Tap Add to Home screen or Install app.
• Tap Add. The icon lands on the home screen.

What this does not do

It does not read other texts. It does not run in the background. It does not get new powers. It only opens this page faster. After it lives on friendlytechneighbor.com, use that address when you add the icon, not a file on the computer.

If the icon will not add

• iPhone: you must be in Safari. Chrome and Gmail’s in-app browser hide Add to Home Screen.
• iPhone: in the Share list, tap Edit Actions, then turn on Add to Home Screen.
• Do not use a file from Downloads or Files. The icon will break. Use the website address.
• Turn off Private or Incognito and try again.
• If the page says Desktop site, switch back to the mobile site first.
• Android: use Chrome. On Samsung, look for Add page to, then Home screen.
• Look on the last home screen page, in the App Library, or in a new folder.
• A compass or globe icon is normal until the live site has a real icon file.