What You Are Protecting, and Who Is After It

Most people picture a stranger in a hooded sweatshirt breaking into their computer. That picture is mostly wrong. The usual story is plainer and sadder. Someone calls, texts or emails, sounds believable, and the victim hands over money or a password. The "break-in" is an invitation.

That is good news. It means a few habits, practiced every day, stop most of the harm. You do not need to understand how a computer works to do them.

One note before we start. This course is education only. It is general information, not legal, financial or tax advice for your situation. Where the right answer depends on your own accounts, the lesson points you to the official agency or company page, and that page wins.

What you are protecting

Photos and old email matter to you. But a thief is rarely after your vacation pictures. A thief wants things that turn into cash fast. Here is the list, in the order that usually hurts most.

Ransomware is harmful software that scrambles your files and then demands money to give them back. Malware is the broader word for any harmful software. We will keep both words simple: they are programs that should not be on your device.

Who is after it, and how it usually goes wrong

The people behind these crimes are mostly organized for profit. Some work from call centers overseas. Some are local. They buy lists of names, phone numbers and old passwords. They try thousands of people a day, because a small share who say yes is plenty. They are not smarter than you. They are patient, and they run scripts that have been tested on thousands of victims.

Harm usually comes down to a short list of slips.

• Believing a message that was made to look real. A text from "your bank," a call from "Medicare," a pop-up from "Microsoft." This is called phishing when it comes by email, text or a fake web page. By phone it is called vishing, but the trick is the same.
• Using the same password in many places. When one website is hacked and its password list leaks, thieves try those same passwords everywhere else.
• Running old software. Updates fix holes. A computer that never updates keeps the holes open for years.
• Sending money in a way that cannot be taken back. Gift cards, wires, cryptocurrency and some payment apps are like handing over cash.
• Keeping everything in one basket. One email address, one password, no backup, and one bad day takes it all.

Notice what is missing from that list: movie-style hacking. It happens, mostly to businesses. At home, tricks beat code.

The numbers, as of October 2026

You should not be scared by numbers. You should know them, so that when someone tells you "this never happens," you know better. These come from the FBI and the Federal Trade Commission (FTC) for the year 2025. Both are official government sources.

These numbers only count people who reported. The true total is higher, because many victims are embarrassed and never tell anyone. The FBI and FTC figures also overlap and use different counting rules, so do not add them together.

Here is some arithmetic to make the size clear. The FBI's $20.877 billion divided by 365 days is about $57.2 million lost every day, counting only what was reported. People 60 and older filed about one complaint in five (201,266 out of 1,008,597, which is 20 percent) but account for about 37 percent of the dollars ($7.748 billion out of $20.877 billion). Older people lose more per hit because they have more savings to lose, and scammers know it.

For people 60 and older, the top complaint types by count were phishing and spoofing (48,064), tech and customer support scams (21,333), investment fraud (16,926), personal data breach (11,705) and confidence and romance scams (10,188). By dollars lost, investment fraud was far ahead at about $3.5 billion, then tech support scams at about $1.04 billion and romance scams at about $584 million. The FBI report itself gives slightly different tech-support figures in two tables, so treat those two numbers as close, not exact.

If those numbers feel heavy, here is the other side. Nearly every one of these losses started with a message or call that asked the victim to act fast, keep a secret, or pay in a way that cannot be reversed. If you learn to spot those three signs, you are ahead of most of the people in that table.

The layered idea in home terms

Think of your home. You do not rely on one lock. You have a front-door lock, a porch light, neighbors who notice, and a safe or a box for the important papers. A burglar has to beat several things, so most give up.

Digital safety works the same way. The picture below shows layers around the middle, which is you and your life savings. Each ring is a layer from this course.

Here is what each layer does for you, and which lesson covers it.

The five habits that stop most harm

If you only do these five things, you will prevent most of what shows up in the numbers above. The rest of the course adds detail and the click-by-click steps.

1. Update everything, and let it update by itself. Windows, Mac, iPhone, Android, your browser and your router. Updates close holes that criminals already know about. The Cybersecurity and Infrastructure Security Agency (CISA), part of the federal government, tells people to turn on automatic updates and not to keep choosing "remind me later." Lesson 2 shows how.
2. Use a different strong password on every important account, and turn on two-step sign-in. A password manager makes this easy. CISA's advice on two-step sign-in puts email accounts first on its list, then banks and health care providers, and says it protects banking information, online purchases and social media too. Lesson 3 shows how.
3. Slow down when anyone asks for money, a code or a hurry. The rule is: stop, hang up, and call back on a number you already know. A real bank, a real grandchild and a real government office will wait ten minutes.
4. Keep a backup. If your computer dies, is stolen or is locked by ransomware, a backup turns a disaster into an afternoon of work. A later lesson covers it in plain steps.
5. Tell someone. Before you pay, before you share a code, before you keep a secret for a stranger, tell a trusted person. Scams need secrecy. One extra pair of eyes breaks the spell.

How to use this course

There are eleven lessons. You do not have to read them in one sitting, or in order, but lessons 1 to 4 build the base, so start there. In short:

• Lessons 1 to 4 cover the foundation: what is at stake, updates and settings, passwords and two-step sign-in, and home Wi-Fi and smart devices.
• Lessons 5 and 6 cover email, web browsing, privacy, phones, tablets and apps.
• Lessons 7 and 8 explain the common scams one by one, and how to guard your money, credit and identity.
• Lessons 9 to 11 cover what to do when something goes wrong, how to travel with devices safely, and how to plan backups and help your family.

Each lesson gives steps for Windows 11, Mac, iPhone and Android. Menu names change between versions, often every year or two. If your screen does not match, use the search box in Settings and type the key word (for example, "update" or "password"). The goal and the order of steps stay the same. When a step needs more than a few clicks, take your time or invite a trusted friend or family member to sit beside you. You stay in charge of your own accounts.

Each lesson ends with a short list, "Do this today," a "Reporting angle" that tells you where to report a problem and what to keep as proof, and a "Research angle" that links to the original government and company pages. Those pages are the final word. If one of them disagrees with this course, trust the page.

Questions and answers

Do I really need all these steps? I only check email and look at photos.

Email is the part that matters. Anyone who controls your email can reset the password on your bank, your pharmacy and your shopping sites, because those sites send the reset link to your inbox. Protecting a quiet life still means protecting the email account. The five habits take about an hour to set up and a few seconds a day.

Is it safe to use the internet at all at my age?

Yes. Most people who use the internet for years never lose money. The people who do get hurt are mostly tricked by phone, text or email, which is a people problem, not a gadget problem. The habits in this lesson work for any age.

What is the difference between a virus, malware and ransomware?

Malware is the big word for any harmful program. A virus is one old kind of malware that spreads itself. Ransomware is malware that locks your files and demands money. For daily life, treat them as one problem with one answer: keep updates on, do not open surprise attachments, and keep a backup.

Who actually protects me online, my bank, the government, or me?

All three do a part. Your bank watches for odd transactions. The government sets rules and takes reports. But nobody can stop you from sending a payment you chose to send. That last step is yours, which is why habit 3 matters.

Will I be told if a company that has my information gets hacked?

Often, but not always on time. Idaho Code 28-51-105 requires businesses and agencies that own or license personal information about Idaho residents to investigate a breach and notify affected residents in the most expedient time possible and without unreasonable delay, if misuse has occurred or is reasonably likely. Do not wait for a letter. If you get a breach notice, take it seriously and follow its steps. A notice that arrives by email can itself be a fake, so go to the company's own website by typing the address, not through a link.

Where do I report a scam in Idaho?

Start with ReportFraud.ftc.gov, the FTC's national site. For internet-related crime, file at ic3.gov. For a local report, the Idaho Attorney General's Consumer Protection Division takes consumer complaints at ag.idaho.gov and can be reached at 208-334-2424 or 1-800-432-3545 (as of October 2026). Your bank is the first call if money or a card number is involved.

My grown children say I should "just use the computer less." Is that the answer?

No. Using it less does not stop the phone calls, the mailers or the texts. Knowing the tricks does. If your children are worried, invite them to take this course with you and agree on the family code word.

I am embarrassed. I think I may have already been scammed. Can I still use this?

Yes. Start with the lesson on what to do when things go wrong. Speed matters more than shame. Banks, the FTC and the hotlines listed above hear this every day and do not judge. The AARP helpline and the National Elder Fraud Hotline both exist for this reason.

Hard questions

Is all this effort worth it? Am I really likely to be targeted?

If you own a phone, you are targeted already. Scam texts and calls go out by the millions. The FTC reported 3 million fraud reports in 2025, and that is only those who bothered to report. The effort is worth it because the losses are lopsided: a few hours of setup can prevent a loss that, for people 60 and older, averaged $38,500 per complaint to the FBI in 2025. Still, you do not need to be perfect. You need layers, so one slip does not cost everything.

If these numbers are so big, why can't the government just stop it?

The government does shut down scams, bring cases and warn the public. But most of these crimes are run from other countries, move money in ways that are hard to trace, and change tactics weekly. Law enforcement works on volume and patterns, which is why every report matters even when you do not get your money back. Honest answer: recovery is often partial or zero. Prevention is far cheaper than recovery.

Do banks and companies fail us, too?

Sometimes. Companies are hacked, and some are slow to say so. Banks reverse some fraud but usually not the payments you authorized yourself, even if you were tricked. Rules and bank policies differ and keep changing, so ask your own bank what its policy is before you need it. The reason this course puts habits first is that habits are the one layer fully in your control.

Why not just stay offline and use cash?

That is a real choice, and some people make it. But you cannot opt out of the phone and the mail, which scammers use heavily, and many bills, benefits and medical portals now expect a login. Staying offline also leaves accounts that no one is watching. A person who never opens their Social Security or Medicare online account risks that a thief opens it first. Lesson 8 in this course covers why.

What if I cannot afford new equipment or paid software?

Nothing in this course requires spending money. Windows Security and Apple's built-in protections are free. Browsers, password manager options and two-step sign-in are free. Where a paid choice helps, the lesson will say so and show the free option next to it.