One-page printable checklist: protect yourself from account takeover and modern scams
Print this page and keep it near your desk. Share it with family members (especially anyone who’s been targeted by scam calls/texts).
The 5-step protection checklist
1) Turn on multi-factor authentication (MFA) — start with email
- Turn on MFA for your email first (Gmail, Outlook, iCloud).
- Then turn on MFA for: banking, Apple ID / Google account, social media, shopping sites.
- Prefer an authenticator app when available.
- Never share MFA codes with anyone who contacts you.
Done when: Email + banking + Apple/Google accounts have MFA enabled.
2) Use strong, unique passwords (with a password manager)
- Stop reusing passwords across sites.
- Use a password manager to generate long random passwords.
- Make your master password long and memorable (a passphrase).
- If a site offers passkeys, consider using them.
Done when: Every important account has a unique password stored in a password manager.
3) Lock down what you share publicly
- Set social profiles to friends-only where possible.
- Avoid posting: birthdate, hometown, school, address, daily routine, travel plans in real time.
- Remove old public posts that reveal personal details.
- Watch what’s visible in photos (mail, license plates, house numbers, badges).
Done when: Privacy settings reviewed + “about me” sections cleaned up.
4) Treat “helpful strangers” + investing as a red flag
- Be cautious with new online friends or romantic connections.
- Red flags include: crypto trading “tips,” a “special platform,” pressure to move to WhatsApp/Telegram, promises of guaranteed returns.
- If you can’t verify the person in real life, assume the relationship could be fake.
Done when: You’ve decided: “I never invest based on advice from a stranger online.”
5) Verify unusual requests (this stops a huge percentage of scams)
If you get a message/call asking for money, gift cards, wire transfers, crypto, login codes, or sensitive info:
- Pause.
- Hang up.
- Call back using a trusted number you already have (contact list, the back of your card, or theofficial website).
- Don’t use links or phone numbers sent in the suspicious message.
Done when: You always “break the channel” before sending money or info.
Quick “stop signs” (when to slow down immediately)
- The message creates urgency: “act now,” “account will be locked,” “don’t tell anyone.”
- You’re asked to pay with gift cards, crypto, or wire transfer.
- You’re asked for a one-time code, password, or “verification” details.
- The story is emotional and time-sensitive (family emergency, legal trouble, missed delivery).
If you think you were compromised (fast response)
- Change your email password first.
- Turn on MFA (or reset MFA if you suspect it was changed).
- Check account recovery options (backup email/phone).
- Review recent logins and devices; sign out of all sessions.
- Contact your bank/credit card issuer if money is involved.
Fill-in section (keep this updated)
- Email provider support page/login: _______________________________
- Bank fraud phone number (back of card): __________________________
- Mobile carrier support number (SIM swap help): ____________________
- Trusted family contact to verify requests: _________________________