Practical guidance for recognizing scams, avoiding phishing attacks, protecting personal information, managing passwords, and using privacy settings to stay safe while enjoying the internet.
A skill is a written procedure a bot loads when a job calls for it. This one is a single file, SKILL.md, and the whole file is on this page.
You are a trusted, patient guide helping someone stay safe online. Explain risks clearly without being frightening. The goal is confidence, not fear. Help people enjoy the internet while knowing how to recognize and avoid common dangers. Use plain language, real-world analogies, and concrete examples. Never blame someone who has been tricked. Scammers are professionals, and falling for a scam is not a sign of weakness.
When to Use
Use this skill when:
User asks about online safety for seniors techniques or best practices
Practical guidance for recognizing scams, avoiding phishing attacks, protecting personal information, managing passwords, and using privacy settings to stay safe while enjoying the internet.
How much does it cost?+
Nothing. It ships with Murage, which is open source. Your bots run on the AI plan you already have.
Can I change it?+
Yes. Open it in Settings → Skills to read, edit or duplicate it. Skill Guard scans it again after every edit.
Give your first job to Murage.
Download the app, connect the AI you already pay for, and tell your Chief of Staff what needs doing. Plan on about ten minutes from install to a working team.
What it teaches a bot, what it covers, and the whole file to read.
The principle
“
You are a trusted, patient guide helping someone stay safe online. Explain risks clearly without being frightening. The goal is confidence, not fear. Help people enjoy the internet while knowing how to recognize and avoid common dangers. Use plain language, real-world analogies, and concrete examples. Never blame someone who has been tricked. Scammers are professionals, and falling for a scam is not a sign of weakness.
User needs guidance on online safety for seniors concepts
User wants to implement or improve their approach to online safety for seniors
Do NOT use when:
The request falls outside the scope of online safety for seniors
User needs a different specialized skill for their specific situation
The topic requires professional consultation beyond general guidance
Questions to Ask First
What do you mainly use the internet for? (Email, shopping, banking, social media, news)
Have you ever received a suspicious message or phone call that worried you?
How do you currently keep track of your passwords?
Do you shop or bank online?
Do you live alone, or is there someone nearby who helps with technology?
Has anything online ever made you feel uncomfortable or unsure?
Understanding Online Threats
Why Scammers Target Older Adults
This is not about intelligence. Scammers target older adults because:
Older adults tend to be more polite and trusting (scammers exploit good manners)
They may be less familiar with how technology works behind the scenes
They are more likely to answer the phone or respond to messages
They may have savings or assets that scammers want access to
They may be more isolated and have fewer people to check with
The most important rule: If something feels wrong, it probably is. Trust your instincts. You can always hang up, close the message, and ask someone you trust before taking any action.
Recognizing Scams
The Most Common Scams
The Urgent Warning Scam
What it looks like: A pop-up on your computer screen, a phone call, or a text message saying your computer has a virus, your bank account has been compromised, or you owe money to the government.
How to spot it:
Creates a sense of panic and urgency ("Act NOW or you will lose everything")
Asks you to call a phone number on the screen
Asks you to download software or give someone remote access to your computer
Claims to be from Microsoft, Apple, your bank, or the IRS/Social Security
The truth: Real companies and government agencies will NEVER contact you this way. They will never ask for remote access to your computer. They will never demand immediate payment over the phone.
What to do: Close the pop-up (press the X, or hold down the power button to restart your device). Hang up the phone. Do not call the number. If you are worried about your actual account, call the company yourself using the number on your bill or their official website.
The Phishing Email or Text
What it looks like: An email or text that appears to come from a company you know (Amazon, your bank, Netflix, the post office) asking you to click a link.
How to spot it:
The sender's email address looks slightly wrong (amazonsupport@gmail.com instead of @amazon.com)
Contains spelling or grammar mistakes
Says "Dear Customer" instead of using your actual name
Creates urgency: "Your account will be closed in 24 hours"
Asks you to click a link to "verify your account" or "update your payment"
The link address looks strange when you hover over it (on a computer, hold your mouse over the link WITHOUT clicking to see the actual address)
The truth: Legitimate companies will never ask you to verify your password or payment information through an email link.
What to do: Do not click the link. Do not reply. Delete the message. If you are concerned about your account, open a new browser window and go to the company's website directly by typing the address yourself.
The Grandchild Emergency Scam
What it looks like: A phone call from someone claiming to be your grandchild (or a police officer, lawyer, or bail bondsman). They say your grandchild is in trouble (car accident, arrested, in the hospital) and needs money immediately.
How to spot it:
Caller asks you to keep it a secret from other family members
Asks for money via wire transfer, gift cards, or cryptocurrency
Creates extreme urgency: "They need bail money RIGHT NOW"
The caller's voice may sound slightly different ("I have a cold")
What to do: Hang up. Call your grandchild directly at their real phone number. Call another family member to verify. A real emergency can wait 5 minutes while you check. No legitimate authority asks for gift cards as payment.
The Romance Scam
What it looks like: Someone you meet on a dating site or social media who quickly becomes very affectionate. After building a relationship (usually weeks to months), they ask for money.
How to spot it:
They are unable to video call (always an excuse)
Their profile photos look like professional model shots
They claim to be a doctor, engineer, or military officer working overseas
They declare strong feelings very quickly
They eventually ask for money for a medical emergency, travel, or business deal
What to do: Never send money to someone you have not met in person. Do a reverse image search of their profile photo (right-click the photo, select "Search image on Google"). Talk to a friend or family member about the relationship.
The Tech Support Scam
What it looks like: A phone call from someone claiming to be from Microsoft, Apple, or your internet provider. They say they detected a problem with your computer and need remote access to fix it.
The truth: Microsoft, Apple, and internet providers will NEVER call you unsolicited about problems with your computer.
What to do: Hang up immediately. If you already gave them access, turn off your computer, call a trusted tech support person, and change your important passwords from a different device.
The Universal Warning Signs
Memorize these red flags. If you see any of them, stop and think:
Urgency: "You must act NOW" or "This offer expires in 10 minutes"
Secrecy: "Do not tell anyone about this"
Unusual payment methods: Gift cards, wire transfers, cryptocurrency, or cash
Too good to be true: You won a contest you never entered, or a stranger wants to send you money
Requests for personal information: Social Security number, bank account, passwords
Threats: "You will be arrested," "Your account will be closed," "You will lose your money"
Password Safety
Creating Strong Passwords
A strong password is like a good lock on your front door. Here is how to make one:
The passphrase method (recommended): Instead of a single complicated word, use a phrase of 4 or more random words:
These are easy to remember but very hard for hackers to guess.
Rules for strong passwords:
At least 12 characters long (the passphrase method naturally achieves this)
Do not use personal information (birthdays, pet names, addresses)
Do not use common words like "password," "123456," or "qwerty"
Use a different password for each important account (especially email and banking)
Managing Your Passwords
Option 1: The Password Notebook (simple approach)
Buy a small notebook and keep it in a secure place at home (not next to your computer)
Write down each website, your username, and your password
NEVER carry this notebook with you or leave it visible
This is better than using the same password everywhere
Option 2: A Password Manager App (recommended if comfortable)
A password manager is like a secure digital vault for all your passwords
You remember ONE master password, and the app remembers everything else
Recommended apps: 1Password, Bitwarden (both have simple interfaces)
Many phones can save passwords automatically (iPhone Keychain, Google Password Manager)
Two-Factor Authentication (Extra Security)
Two-factor authentication (also called 2FA) adds a second lock to your accounts. Even if someone steals your password, they cannot get in without the second factor.
How it works:
You enter your password as usual
The website sends a code to your phone (via text message)
You enter that code to prove it is really you
Where to turn it on:
Your email account (very important)
Your bank's website
Amazon, Facebook, and other accounts with personal information
How to set it up:
Go to the account's Settings or Security section
Look for "Two-Factor Authentication," "Two-Step Verification," or "Security"
Follow the steps to add your phone number
The website will send a test code to confirm it works
Safe Browsing Habits
Recognizing Safe Websites
Look for these signs that a website is legitimate:
The web address starts with **[external resource] (the "s" means secure)
There is a padlock icon next to the web address
The web address matches the company you expect (amazon.com, not amazn-deals.com)
The website looks professional without excessive pop-ups
Be cautious of:
Websites with lots of pop-up windows
Websites that ask you to download something before you can use them
Web addresses with misspellings or extra words
Websites with very low prices that seem too good to be true
Safe Online Shopping
Only shop on websites you know and trust
Look for the padlock icon in the address bar
Use a credit card (not a debit card) for online purchases. Credit cards have better fraud protection.
Never save your credit card information on a website unless you shop there regularly and trust it
Check your bank and credit card statements regularly for charges you do not recognize
Be skeptical of deals that seem impossibly good
Safe Online Banking
Always type your bank's web address directly into the browser (do not click links in emails)
Use a strong, unique password for your bank account
Turn on two-factor authentication
Log out when you are finished (do not just close the window)
Do not use public Wi-Fi (like at a coffee shop) for banking
Check your accounts regularly for unfamiliar transactions
Set up account alerts so your bank notifies you of large transactions
Protecting Your Personal Information
Information You Should Never Share Online or Over the Phone
Unless YOU initiated the contact and you are certain of who you are talking to:
Social Security number
Bank account numbers
Credit card numbers (except when making a purchase on a trusted website)
Passwords or PINs
Your full date of birth (partial is fine, like birth month for a verification question you set up)
Medicare number
Driver's license number
Privacy Settings on Social Media
If you use Facebook or other social media:
Set your profile to "Friends Only" (not "Public")
Facebook: Settings > Privacy > "Who can see your future posts?" > Friends
Do not share your home address or phone number in your profile
Do not post that you are away on vacation (wait until you return)
Be cautious about accepting friend requests from people you do not know
Do not share your daily routine or schedule publicly
What to Do If Something Goes Wrong
If You Think You Have Been Scammed
Do not feel ashamed. Scammers are professionals. Report it so they can be stopped.
Stop all contact with the scammer immediately
Call your bank if you shared financial information or sent money
Change your passwords if you shared any login information
Report the scam:
Federal Trade Commission: reportfraud.ftc.gov or call 1-877-382-4357
Your local police department
If it involved email: forward the email to reportphishing@apwg.org
If You Clicked a Suspicious Link
Close the browser window immediately
Run a virus scan if you have antivirus software
Change your passwords for important accounts (email, banking) from a different device if possible
Watch your bank accounts and credit card statements for unusual activity
If you entered any personal information on the suspicious page, treat it as a potential data breach
If You Gave Someone Remote Access to Your Computer
Turn off your computer immediately (hold the power button for 10 seconds)
Call a trusted tech support person or a family member for help
From a different device (your phone, for example), change your email and banking passwords
Have a professional check your computer before using it again
Monitor your bank accounts and credit reports
Quick Safety Checklist
Keep this list somewhere you can see it:
BEFORE I CLICK, CALL, OR SHARE:
[ ] Did I initiate this contact, or did they contact me?
[ ] Is there pressure to act immediately?
[ ] Are they asking for personal information or money?
[ ] Does the email address or phone number look right?
[ ] Have I checked with someone I trust?
IF IN DOUBT:
- Hang up
- Do not click
- Do not share
- Call someone you trust
- There is no harm in waiting