Avoiding online scams & deepfakes: How to protect yourself
The digital world offers incredible convenience and connection, but it’s also become a fertile ground (or cesspool) for misinformation, disinformation, deepfakes and sophisticated scams. These cyber dangers are particularly insidious for older adults who may be less familiar with rapidly changing technology or more trusting of perceived authority.
Read: Can You Cost Into Retirement With a Less Stressful Job In Your 50s?
Explore: Drinking, Eating and (Not) Sleeping Like A 20-Something? It May Be Time for a Change
Keep reading to learn about some tools to spot these deceptions, because knowledge really is power when navigating the internet.
Understanding the threats
Before we look at strategies for detecting potential attempts to steal your personal information, it’s helpful to understand the nuances of these dangers.
- Deepfakes: Bad actors use artificial intelligence (AI) to create these highly realistic, manipulated images, audio or videos. Creators can make it appear as though someone is saying or doing something they never did, and the technology has improved so much that it’s become tough to distinguish some deepfakes from reality.
- Scams: These fraudulent schemes trick people into giving away money or personal information. Emails, phone calls, and even text messages employ tactics of urgency, fear, or promises of incredible returns.
Spotting the red flags
The key to protecting ourselves and older adults? A healthy dose of skepticism and a critical thinking mindset. Here are some strategies to try.
General principles for all digital interactions
- Pause and verify: This step is the golden rule. Before clicking a link, responding to a message or addressing an urgent message, take an “active pause” to process and think about whether something feels off.
Example: Let’s say you recently bought something online from Best Buy. A cybercriminal can pose as the store and send an email that appears to come from Best Buy headquarters with a “warning” that your credit card info may have been compromised. This email may include a link to another site that asks you to confirm your credit card number. - Cultivate skepticism—not paranoia: Question everything, especially a message that evokes strong emotions (fear, excitement, anger) or seems too good to be true.
Example: You receive an email from the “IRS” promising a tax refund or saying that the agency made a mistake and you’re due a refund. The email tone is urgent and designed to pressure quick action. The email usually provides a link to a fake site designed to install malware on your computer or ask you to input personal information like your social security number, birthdate or bank account number. - Talk about money openly (but safely): Discussing financials can make anyone squirm, but it’s necessary. AARP recommends taking a non-intrusive and non-condescending approach to explaining the threat of scams to older adults. Let your parents know that you want to help keep them safe, not control their finances. Consider setting up a “trusted contact” with their financial institution, which allows the bank to alert you to suspicious activity without giving you direct access to their money.
- Establishing a trusted circle: A second opinion – just like for a medical diagnosis – is something to consider as well. Explain the message you got to a trusted friend or family member and get their opinion on whether this is real or not. If you have older parents, suggest that they nominate a go-to person (you, another family member, a trusted friend) they can talk to before making any decisions based on suspicious communications. If someone contacts them and says, “Don’t tell anyone about this,” — hello, red flag!
Example: Last year, my mom started getting scam SMS messages about unpaid turnpike tolls. While she and Dad still drive to Atlantic City once a month, I set up their EZ-Pass account online to make automatic withdrawals when their account balance reaches a low threshold. Mom receives an email whenever a transaction occurs. In the 12 years we’ve done this, she’s never received a text—until about six months ago. The first time it happened, she called and asked me about it. I confirmed that it was indeed a phishing attempt to get her banking information. My 15-year-old has recently started receiving these texts on his phone as well. Now, we simply block the offending number.
Identifying deepfakes in video or audio calls
Deepfake technology is continually adapting and evolving, making it increasingly difficult to spot, but there are still telltale signs.
- Unnatural eye movement or lack of blinking
- Inconsistent facial expressions or body movements
- Awkward lighting, shadows or skin tone
- Poor lip-synching or robotic audio
- Unusual backgrounds
If a family member calls with an urgent request for money, especially if it sounds like an emergency, hang up and call them back on a known, trusted number. Ask them a question only they would know. This strategy is especially important for “grandparent scams,” where scammers impersonate grandchildren in distress.
Other deepfake scams include:
- Extortion scams
- Investment scams
- Political scams
- Romance scams
Protecting against SMS, email and phone call scams
Many scams begin with an unexpected contact that creates a sense of urgency or offers something too good to be true. Teach your children and your parents to treat all unsolicited communications with suspicion.
- Never click on suspicious links or download attachments. Phishing emails and texts often include links leading to fake websites designed to steal login credentials or download malware. Hover your mouse over the links (without clicking) to see the actual destination (or avoid clicking altogether from unknown senders).
- View urgent requests for money or personal information with skepticism. Legitimate organizations rarely demand payment, especially not via gift cards, wire transfers or cryptocurrency. They will also never ask for sensitive personal information (social security numbers, bank account details, passwords) over the phone, email or text.
- Government impersonation scams are on the rise. The IRS, Social Security Administration and other government agencies will never call, text or email demanding immediate payment or threatening arrest. If you or your parents receive such a call, hang up and report it.
- Tech support scams are also on the rise. A pop-up message on a computer claiming a virus and asking you or your parents to call a toll-free number or click a link is almost certainly a scam. Legitimate tech companies don’t initiate unsolicited calls about computer issues.
- You’ve won! If you haven’t entered a lottery or sweepstakes, you didn’t win. Any request for an up-front payment to claim a “prize” is a scam.
- Register for the National Do Not Call Registry. This organization can help reduce unsolicited calls from legitimate telemarketers, making it easier to distinguish between potential scams and legitimate calls. Register at www.donotcall.gov or by calling 1-888-382-1222 from the phone you want to register.
- Enable two-factor authentication (2FA) or multi-factor authentication (MFA). Use 2FA/MFA on email, banking and social media accounts. This authentication adds an extra layer of security by sending a code to a smartphone (or email) in addition to requiring a password.
- Review bank and credit card statements regularly. You and your parents should monitor your accounts for any unauthorized transactions. Set up bank alerts for unusual activity.
Additional resources
- AARP Fraud Watch Network, a fantastic resource, free to everyone, includes:
- Helpline: 877-908-3360 (toll-free, M-F, 8 a.m. to 8 p.m. ET) for support and guidance if you suspect a scam.Scam-Tracking Map“
- Federal Trade Commission (FTC): The FTC provides information on common scams and allows you to report fraud.
