The internet has made everyday life more convenient, from remote work to online banking. But that convenience has also created more opportunities for scammers to target your money and personal information.
According to a 2026 report from the Consumer Federation of America, Americans lose an estimated $119 billion annually to online scams. And the risk spans generations. In 2025, the Pew Research Center found that 73% of U.S. adults had experienced an online scam or attack, with similarly high rates among adults under 30 and those ages 30 to 64.
While you can't eliminate the risk entirely, a few simple habits can make it harder for scammers to get your personal information or your money. Here are seven steps you can take to better protect yourself online.
From just $107.88 $24.99 for Kiplinger Personal Finance
Become a smarter, better informed investor. Subscribe from just $107.88 $24.99, plus get up to 4 Special Issues
Sign up for Kiplinger’s Free Newsletters
Profit and prosper with the best of expert advice on investing, taxes, retirement, personal finance and more - straight to your e-mail.
Profit and prosper with the best of expert advice - straight to your e-mail.
1. Stop clicking links in unexpected messages
One of the easiest ways to protect yourself from online scams is to stop clicking links in unexpected messages. If you receive an email or text warning about a problem with your bank account, credit card, delivery or subscription, don't click the link. It could take you to a fake website designed to steal your information or download malware onto your device.
Instead, open the company's app or type its URL directly into your browser and log in to your account. You can also call the company using a phone number you know is legitimate to verify the message.
Scammers often create a sense of urgency to get you to act before you have time to question whether a message is legitimate. If you're told to act "immediately," that's a reason to be more cautious, not less.
2. Use stronger passwords and multifactor authentication
With so many passwords to remember, it can be tempting to reuse them across multiple accounts. But if one account is compromised, scammers could use those same login credentials to try to access others.
Create a unique password for each account. If keeping track of them is difficult, consider using a password manager such as 1Password, Bitwarden or Keeper, which can securely store and manage your login credentials.
For financial, email and other sensitive accounts, enable multifactor authentication when available. It adds another layer of security by requiring additional verification beyond your password. Authenticator apps and passkeys can offer stronger protection than SMS codes, which can be vulnerable if your phone number or mobile account is compromised.
3. Make it harder for scammers to find your personal information
Scammers may access information through data brokers, social media and previous data breaches to make their approach seem more convincing. For example, a scammer might be able to access details like your location, pet’s name, title at work, the school you attended and more. By using your digital footprint, scammers may build a highly realistic profile that they could use to impersonate you.
Services like Surfshark can help reduce the amount of personal information available online or alert you if your information is exposed. Surfshark's Incogni is a personal data removal service that helps keep your information safe by requesting that data brokers remove your personal information. The service continuously monitors data brokers and sends automated opt-out requests on your behalf. It's included with Surfshark One+, the third-highest plan tier.
Other services, including Aura and Norton Privacy Monitor, also offer tools that can help you find and remove personal information from data broker sites.
4. Protect yourself from dangerous websites
Fake shopping sites, financial websites and login pages can closely resemble legitimate ones, making them difficult to spot at a glance.
Before entering personal or financial information, carefully check the website's domain. Spoofed sites may use a slightly altered address, such as changing or adding a single letter. Be especially cautious if you reached the site through an unexpected link or if you're asked to pay using an unusual method, such as gift cards.
Security tools can provide another layer of protection. For example, Surfshark offers malware and phishing alerts that can warn you when you're about to visit a site associated with scams or malicious software. If a threat is detected, Surfshark displays a warning screen before you proceed.
These tools can help you spot potential threats, but they aren't foolproof. You can still choose to visit a flagged website, and a VPN alone can't protect you from every scam. That's why it's important to combine security software with safe browsing habits.
5. Turn on alerts for your financial accounts
Consider enabling bank and credit card notifications for transactions, transfers, password changes and other account activity. These notifications don't necessarily prevent scams, but they may help you to quickly catch unauthorized activity so you can limit the damage.
There are extra steps to take to protect yourself:
- Review your credit reports: Check your credit reports regularly for unfamiliar accounts or other activity you don't recognize.
- Freeze your credit: A credit freeze can prevent scammers from opening new credit accounts in your name. You can freeze your credit even if you haven't been a victim of fraud.
- File a fraud alert: If you suspect you're a victim of identity theft, you can place a fraud alert by contacting one of the three major credit bureaus. That bureau will notify the other two. A fraud alert tells lenders to take extra steps to verify your identity before opening new credit in your name.
6. Be skeptical when someone asks you to change how you pay
Scammers often request payment through gift cards, cryptocurrency, wire transfers or peer-to-peer payment apps. These transactions can be difficult or impossible to reverse once the money is sent, making it harder to recover your money.
Be especially cautious if someone unexpectedly tells you to move money to "protect" it. A scammer may impersonate your bank's fraud department, a government agency, a business or even someone you know, then pressure you to transfer money or make a payment.
Urgency is another warning sign. If someone claims you need to send money immediately to prevent fraud, avoid a penalty or help a family member in an emergency, independently verify the situation before taking action.
7. Slow down before you send money or information
Many scammers rely on urgency, fear, excitement or authority to get you to act quickly before you think to independently check the claim or authenticity of the message you've received.
The simplest defense against these online scams is also the simplest: Slow down and take your time.
If you receive a message, especially an urgent message, stop and think. Use a separate channel, like a web browser that you've opened yourself, to verify the request. If you've received a message appearing to come from your bank, call your bank directly using a number from your bank statement.
Artificial intelligence has allowed scammers to create highly realistic voicemails and videos resembling people. If you receive a message that seems to be from a family member, call the person directly to confirm that what you've received is real.
Can online security software protect you from scams?
No cybersecurity product can protect you from every scam, but security software can provide an extra layer of protection. Depending on the service, it may block known malicious websites, alert you when personal information has been compromised or help reduce the amount of your data available online.
However, these protections have limits. Security software generally can't prevent you from sending money or sharing personal information with a convincing scammer.
Depending on the product, online security features may include:
- Malicious-site protection: Warns you before you visit websites associated with scams, phishing or malware.
- Data removal: Requests that data brokers remove your personal information, helping reduce your online exposure.
- Breach alerts: Notifies you if your personal information is found in a known data breach so you can take steps to protect your accounts.
- Identity protection: Features such as Surfshark's Alternative ID and Alternative Number can help you avoid sharing your real contact information online.
Security software can help strengthen your online security, but it works best when you act on its warnings and alerts. If a tool flags a compromised password, exposed personal information or a potentially dangerous website, take the recommended steps to address the risk.
Make yourself a harder target for scammers
The best time to protect yourself from an online scam is before one reaches you. Strong passwords, multifactor authentication, financial alerts and less personal information available online can all make it harder for scammers to target you successfully.
Just as important is knowing when to slow down. Verify unexpected requests independently before clicking a link, sharing personal information or sending money.
Security software can add another layer of defense by warning you about potential threats, but it can't replace smart online habits. Combining the two can help you spot scams earlier and reduce the chances that they cost you money.
Related Content
