This ethical hacker’s one tip changed how I think about digital scams

Scams existed before the internet, but being online makes them so much worse. A grifter can steal money faster by flooding the world with so many different tactics, like fake text messages, deceptive emails, malicious websites, and bad search engine results. Trying not to get tripped up is complicated. It’s something I’m always aware of when sharing best practices with others. 

But when I recently spoke with ethical hacker Mike Danseglio, I got a surprise tip that makes avoiding scams so much easier.

Be suspicious.

Most people start from a place of trust first. But constantly scanning for ill intent is more work for our brains—especially now as scammers get more sophisticated and persistent. Instead, if you default to thinking it could be a trick, you’ll naturally screen more carefully.

At least, I know I do. I ask myself more detailed questions, like who exactly is contacting me and if they have a good reason to. 

As for what to do next, Danseglio believes in an equally simple approach. Don’t ignore all messages—some will be legitimate. Just follow up directly, instead of using the links or phone numbers given to you.

(Ex: Get a text from your bank about fraudulent activity? Find the phone number for customer service on your credit card or the company’s website, then initiate the call yourself. Or if a website instructs you to change a password after an account breach, open a separate tab and sign in independently. And if your friend calls and says they’re in jail for causing a car accident? First try calling your saved number for them.)

This overall recipe for avoiding scams (wariness + direct contact) is very simple to remember. And more importantly, follow. 

It’s a heck of a lot easier than trying to memorize every piece of advice on how to avoid specific scams—which is still helpful to read when journalists and experts share those details (hi) for basic familiarity with what’s out there. (Threats keep changing, and much faster than even five years ago, too.) But realistically, it’s easier to go back and search for specific tips when you need them.

Of course, online dangers are more than just scams—attackers can steal money, accounts, and other valuable information through other methods. Keeping antivirus software up to date, using a password manager to create and manage unique strong passwords, and minimizing how much personal info you share online are vital, too. You can hear myself and other PCWorld staff members discuss this with Danseglio in our chat with him on The Full Nerd, our weekly show. Our chat includes a whole segment on Windows 10 security, a looming issue with its end of life coming this October.