How to protect kids online from 5 common internet scams

Parents often tell their kids, “If something sounds too good to be true, it probably is.” And today’s online scams may come from a hacked friend’s account, an AI-generated voice that sounds like someone they know or a message shared by someone who believes the information is real.

That can make scams especially difficult for children and teens to recognize. According to Verizon research, 63% of Americans have experienced some type of cyber threat in the past year, and 80% of parents worry about their children being manipulated by online scams.

Many scams succeed by creating urgency and getting kids to react before they stop to question what is happening. Parents can help by teaching children to pause and ask three simple questions before clicking a link, sending money or sharing personal information:

• Who is asking me? Could this account be fake, hacked or copied?
• Why are they asking me to act so fast? Urgency is one of the oldest tricks scammers use.
• Can I verify this another way? Is there a way to call, text or ask a trusted adult before responding?

Here is a deeper look at five scams kids may encounter, what parents should know, what children should watch for and what to do if a child is targeted.

 

Common scams targeting kids include gaming scams, phishing and smishing, AI impersonation, money mule schemes and sextortion.

What is a gaming scam?

Many scams happen entirely inside online games. Scammers may promise free in-game currency, exclusive skins or rare items. Gaming accounts often contain years of progress, purchased games and rare items, making them valuable targets for scammers.

One common tactic is offering to buy in-game items through a digital wallet, in-game currency or another payment service — but only after the child sends the items first. Once the trade is complete, the scammer disappears without sending the money.

Another common scam involves account sharing. Someone may say, “Let me log in to your account, and I’ll buy you currency or rare items with my credit card. I’ll remove my card afterward.” Instead, the scammer changes the password, recovery email and security settings, locking the owner out completely.

Why kids fall for it: Kids think of their favorite games as places where friends hang out, which can make offers from other players feel more trustworthy.

If this happened to your child:

• Change the account password immediately.
• Turn on two-factor authentication.
• Report it to the game’s support team.
• Check whether any payment information is attached to the account.

What is phishing and smishing?

Phishing scams arrive by email. Smishing scams arrive by text. Both try to trick kids into clicking a link or sharing usernames, passwords or other personal information. The message may look like it came from a game, school or streaming service.

What to teach your kids: They do not need to memorize every kind of scam message. Instead, look for common patterns:

• The message creates urgency — for example, it asks the recipient to “click the link now” to resolve a crucial issue.
• It asks for login information.
• It says something is wrong with the account.

If this happened to your child:

• Change passwords immediately.
• Change the password on any other account that uses the same one.
• Watch for unusual account activity or unexpected charges on a bank card.
• Tell the child’s school if a school account was involved.

What is an AI impersonation scam?

AI-generated impersonation gives scammers another way to make a fake request look or sound real. Scammers can create convincing voices, photos and videos that appear to come from someone a child knows or even a popular influencer.

For example, a teen might receive a voice message that sounds like a friend asking for money or a password. Scammers can also copy profile photos, usernames and posts to create convincing fake accounts.

Why this one feels believable: For most people, hearing someone’s voice or seeing their face has been enough to suggest they were real. AI is changing that. Kids may be especially likely to respond quickly when a message feels urgent or emotional, making it even more important to pause before acting.

If this happened to your child:

• Contact the real person another way before responding.
• Report the fake account.
• Save screenshots before blocking the scammer.
• Create a family safe word so everyone has a simple way to confirm whether an emergency is real.

What is a money mule scam?

Money mule scams can be disguised as easy-money jobs or referral opportunities shared through social media and messaging apps. Teens may believe they are helping with a simple online job or earning money when they are actually moving stolen money for a criminal.

Why kids fall for it: Kimmel says these offers can be difficult for families to counter when friends or social media influencers appear to be promoting similar ways to make money.

If this happened to your child:

• Stop communicating with the person who made the offer.
• Cancel any pending payments if possible.
• Talk through what happened without blame.

The Federal Trade Commission also provides a step-by-step guide for people who have been scammed.

What is a sextortion scam?

This scam can begin with friendship. Someone pretending to be another tween or teen builds trust over days or weeks before asking for an intimate photo. Once the scammer has it, they demand money or more images to keep it from being shared.

Why kids stay quiet: Fear and embarrassment can keep children from telling an adult. That is exactly what scammers are counting on. Helping a child feel safe enough to ask for help can be just as important as reporting the crime.

If this happened to your child:

• Tell the child they are not in trouble.
• Stop communicating with the scammer.
• Save evidence instead of deleting it.
• Report the incident to the platform and, if appropriate, law enforcement.

The National Center for Missing & Exploited Children offers sextortion resources that can help remove or stop the spread of explicit images taken when a person was under 18.

How technology can help keep your child safe

Technology can provide a backstop, but it does not replace conversations about how scams work. Two-factor authentication can help secure accounts, while identity-monitoring services can alert families if personal information has been compromised and may offer restoration support if a child’s identity is stolen and misused.

By teaching kids how to think instead of simply what to avoid, parents can help prepare them for whatever comes next.

Internet scam glossary for parents

Account takeover scam: A scammer tricks a child into sharing a password or verification code, then changes the account settings so the real owner cannot get back in. Gaming accounts are common targets.

AI impersonation scam: A scammer might ask for money while pretending to be a friend, a relative in trouble or even a popular influencer.

CAPTCHA scam: Some fake websites use phony CAPTCHA tests to trick people into downloading malware or running harmful commands on their computer. A legitimate CAPTCHA should not ask someone to copy code into a computer’s settings or install software.

Credential stuffing: Criminals take usernames and passwords stolen in previous data breaches and try them on other websites. Using a unique password for each account can help prevent one stolen login from becoming many.

Crypto investment fraud (pig butchering): A long-term scam in which a criminal builds trust before encouraging someone to invest in cryptocurrency through a fake investment platform. The scammer may show fake profits to encourage larger investments before disappearing with the money. Teens should be cautious of investment opportunities from strangers or anyone promising guaranteed returns.

Deepfake: An AI-generated image, audio clip or video designed to look or sound real. It may show someone saying or doing something that never happened. Families can get into the habit of verifying surprising media before believing or sharing it.

Gaming scam: Gaming scams often promise something kids already want, such as in-game currency, rare skins or exclusive items. Others involve fake trades or offers to “help” with an account. If someone asks a child to share login information or send items first, the offer may be a scam.

Money mule scam: A scam that tricks someone into moving money for a criminal. Teens may think they are helping with a simple online job or earning money when they are actually transferring stolen money.

Phishing: An attempt to steal passwords or personal information through fake emails, websites or messages that look legitimate. A phishing message may look like it is coming from a school, streaming service, game company or bank.

QR code scam: Some scammers place QR codes on packages, flyers or signs that send people to fake websites designed to collect personal or payment information. If a child does not know where a QR code came from, it is safer not to scan it.

Sextortion: Sextortion often begins with someone pretending to be another young person online. After building trust, the scammer pressures a child to share an intimate photo, then demands money or more images to keep it from being shared.

Smishing: Phishing through text messages. A text may claim a package could not be delivered, a payment failed or an account has been locked. The goal is to get someone to click a fake link or share personal information.

Social engineering: The practice of manipulating people instead of hacking computers. Rather than breaking into an account, scammers build trust, create urgency or play on emotions to convince someone to give away information voluntarily.

Virtual kidnapping scam: A scam in which criminals use AI-generated voices or other fake evidence to convince a parent that a child has been kidnapped or is in danger and needs money immediately. Families can prepare by creating a private code word and agreeing to verify emergency requests before sending money.

Vishing: Phishing over the phone. Instead of an email or text, the scam arrives as a phone call or voice message. The caller may pretend to represent a bank, government agency or technology company and pressure someone into sharing personal information.

Ray Pastore, Ph.D., is an instructional technology professor at the University of North Carolina Wilmington, a researcher who studies how people learn with technology and a father of three.

This story was produced by Verizon’s Parenting in a Digital World and reviewed and distributed by Stacker.