Have I Been Pwned
Type in your email address and see which known data breaches it appears in. A listing is a list of passwords to retire, starting with any you reused. Free, run by security researcher Troy Hunt, used by governments.
Use these any time
Resources
Start with the checker if something just landed in your chats. The rest are the tools the sessions use, all free.
Check a message
Paste a suspicious text, WhatsApp, or email below. The check runs on this page, in your browser. Nothing you paste is sent anywhere or saved.
On a phone without a browser like this one, use the same questions on paper. They are printed in the workbook: did I expect this, where does the link go, and is this page allowed to ask for my email password?
Offices never ask that
An idea borrowed from the American Bankers Association's "Banks Never Ask That" campaign, applied to the offices in our lives. If a message asks for one of these, the message is the problem, whatever name is on it.
✕ A shul office never asks for gift cards over WhatsApp.
✕ A school never moves tuition to a new portal by chat message.
✕ A bank never asks for your PIN, your password, or a code read out loud.
✕ A tzedakah campaign never needs the money in the next hour, by Zelle, in secret.
✕ A grandchild never needs bail money wired before his parents can be told.
✕ An office never tells you not to call the office.
The tools from the sessions
The Scam Spotter quiz
Google and the Cybercrime Support Network built the best short quiz in this field. Their whole method is three rules: slow down, spot check, stop and do not send. Takes five minutes and it stings a little, in a good way.
Banks Never Ask That
The banks' own campaign, with a game and short videos. Good to send to anyone who thinks a bank might really text them a sign in link.
If your identity was used
IdentityTheft.gov builds a step by step recovery plan from what happened to you: which accounts, which documents, who to call first. Run by the FTC.
Report a scam
Reports feel useless and are not. They are how the FTC and the FBI see a campaign early enough to warn everyone else. Five minutes.
reportfraud.ftc.gov · ic3.gov for internet crime
The fridge card
Our own. The code word agreement and the hang up and call back rule, one page, meant for the fridge where the phone calls actually happen.