A child does not need to decide whether every message is a scam. They need a safe default when money, a payment link or personal information appears: pause, close, tell. That rule works for game purchases, prize messages, fake emergencies and requests that pretend to come from someone familiar.
Define protected information
Make cards for full name, birth date, home address, school, passwords, one-time codes, identity numbers, bank details and card photographs. Sort them into “never share by message,” “adult decides” and “ordinary information.” Context matters, so avoid claiming that a first name is always secret. The important rule is that financial details, passwords and verification codes stay with the responsible adult.
Teach the three-step pause
- Pause: do not click, reply, pay or continue a call.
- Close: leave the page or message without downloading anything.
- Tell: show a trusted adult using a different route if the message claims the adult is unavailable.
CFPB guidance advises keeping personal information private and requiring adult permission for online purchases. Children should know they will not be punished for bringing a suspicious message, even if they already clicked.
Rehearse common pressure lines
- “Act now or your account will disappear.”
- “You won a prize; pay a small fee.”
- “Your parent needs help. Do not call them.”
- “Send the code we just texted you.”
- “Use a gift card because the normal payment is broken.”
Ask the child to practise one sentence: “I do not make money decisions in messages. I will check with my adult.” They do not need to argue with the sender.
If something was shared
Stay calm and act quickly. Stop further contact, save evidence without forwarding it publicly, change relevant passwords from a trusted device and contact the bank, platform or local reporting service as appropriate. Do not make the child responsible for recovering money or confronting the sender.
Adapt without surveillance
Younger children can use a red pause card beside a device. Older children can check the sender through a known phone number or official app with an adult. A family rule should not require reading every conversation; it should create a reliable route for help.
Related EdCaptain guides: needs and wants in context, comparing the real cost, and planning within a fixed budget.
Make the adult response worth trusting
A pause rule fails if children expect anger or instant device confiscation whenever they disclose a mistake. Agree that the first adult response will be: “Thank you for telling me. Let us stop any further risk.” Consequences can be discussed after accounts and safety are protected.
Adults should model the same behaviour. Say aloud when you independently call a bank, type a known website instead of clicking a link, or decline a request that uses urgency. This shows that checking is ordinary, not evidence that a child is naive.
Run four ten-second rehearsals
- A game offers a “free” prize after entering card details.
- A friend’s account asks for emergency money and says not to call.
- A message asks for a one-time code to “confirm identity.”
- An online seller moves the conversation to a private payment channel.
For each, the child points to pause, close and tell. Older children can identify a separate verification route. Never send a reply merely to test whether a scammer answers.
Aftercare matters
Being tricked can bring embarrassment or fear. Avoid “I told you so.” Explain that scams are designed to create urgency and imitate trust. Review one protective change, such as purchase approval, stronger account security or a clearer trusted-adult list. Then return to ordinary device use when it is safe. The goal is a child who seeks help early, not one who hides problems.
