It will look like winning.
A free skin. A giveaway from a “famous” player. A message saying they’ve been specially chosen. The first scam your child meets will be dressed as the best day of their week – because that’s the entire job of a scam, and the people writing them are better at their job than most adults want to believe.
I’ve spent nearly twenty years in cybersecurity and I hold a CISSP, so I’ve read the same parent guides you have. They all end the same way: “Talk to your kids about phishing and scams.” Solid advice. Completely hollow. Nobody tells you what that conversation is supposed to sound like, and if you’ve ever tried it, you know how it goes – you explain, they nod, and the nod means please stop talking so I can go back to my game.
Here’s the uncomfortable truth behind that nod, and what actually works instead.
Why the lecture fails
A lecture about scams asks a child to store a warning about a situation they’ve never been in, for use at an unknown future date, delivered by someone they suspect is exaggerating. That’s a lot to ask of anyone. Adults fail this exact test constantly – phishing works on grown professionals after corporate training, which is a fact my whole industry would prefer you didn’t dwell on.
Recognition doesn’t come from being told. It comes from having seen the shape of the thing before. Firefighters don’t learn fire from a slideshow; they train in smoke. The question isn’t “how do I explain scams to my child” – it’s “how does my child safely meet one before it matters?”
The shape to teach (there’s really only one)
Nearly every scam aimed at kids – and most aimed at you – runs on the same engine: it’s too good, and it’s in a hurry. Free stuff, exclusive prizes, act now, tell no one, limited time. Strip the costume off any of them and that’s the skeleton underneath.
Which means you don’t need to teach forty scam formats. You need one reflex: when something is too good to be true and rushing you, slow down. One sentence. Reflexes, though, aren’t installed by sentences. They’re installed by reps.
How to get the reps in
Some things that work in real households:
- Spot it in the wild, together. Scam texts and dodgy emails arrive at your phone weekly. Instead of deleting them, show one: “What’s weird about this?” Let them find the tell. Being the detective is fun; being the audience is not. Ten seconds, once a week, beats one annual lecture by a mile.
- Make it a game you lose gracefully. Ask them to try to trick you. Kids who practise building the trick become spectacularly hard to trick – you can’t con someone who knows the machinery.
- Let them practise somewhere the stakes are zero. This is, transparently, why I built what I built. In Cyberlingz, one of the Intel Lab’s first cases hands players a deal that’s simply too good to be true, and lets them work out – with evidence, at their own pace, no lecture in sight – why it smells wrong. Getting it wrong costs nothing except ARIA’s opinion of you, which, fair warning, she will share. The case never says “this is a phishing lesson.” It doesn’t need to. The reflex is the point, not the vocabulary.
What you’re actually building
Not a child who’s afraid of the internet. A child who’s hard to rush. That’s the whole skill. Scams need speed and silence; a kid who’s learned to pause and say something out loud has already beaten most of them.
And that skill doesn’t expire. The nine-year-old who reflexively side-eyes a free-Robux offer becomes the adult who side-eyes the “urgent” email from the fake bank. You’re not protecting this week’s pocket money. You’re installing the pause that protects them at thirty.
Start with the dodgy text in your inbox this week. Or start in Cyber City – the door’s open, mission 01 is free, and the too-good-to-be-true case is waiting in the Intel Lab.
Just don’t start with a lecture. They’ve already nodded through enough of those.
