Essentials
11 curated resources, easiest first.
Explains how criminals reuse stolen data to craft convincing scam messages, and how to check whether you are affected. Covers securing accounts, spotting follow-up scams and reporting them.
A one-page printable summary of what to do after a data breach, including warning signs of follow-up scam messages and how to report suspicious emails, texts and calls.
Teaches four common scam warning signs: pretending to be someone trusted, claiming a problem or prize, pressure to act fast, and unusual payment demands. Adds practical protection and reporting steps.
The FTC explains how to spot phishing emails and texts and which protections help, such as automatic security updates, multi-factor authentication and backups. It also says what to do if you clicked or shared information, and where to report it.
Explains how scam texts try to get you to click links, share details or install malware, and how to block and report them.
Shows how fake tech-support callers, pop-ups and bogus renewal notices scare people into paying or granting remote access. Explains how to avoid them and what to do if you already responded.
Covers what malware is and how criminals use it to steal data, show ads or lock files for ransom. Gives prevention habits and a response plan if you think a device is infected.
A hub from the UK NCSC on fake emails, texts, calls, websites and adverts. It shows how to report each kind, what to do if you shared personal information, and how to limit what scammers can learn about you.
Describes how phishing messages by email, text, social media or phone try to trick you into clicking harmful links or giving up personal data. Lists the warning signs and a simple routine for dealing with a suspicious message.
EFF's Surveillance Self-Defense guide describes credential-harvesting and targeted spearphishing and gives defences. It stresses updates, password-manager autofill as a warning signal and hardware keys or passkeys that will not work on fake sites.
A four-page CISA fact sheet on preventing and responding to ransomware that also steals data. Aimed at organisations, but its advice on offline backups, patching, MFA and containing an infection is a useful reference for small offices.