The Moment I Knew I Had to Teach This
Ella was sitting at the kitchen table, using her school Chromebook, when she called out:
"Dad, can you help me? I got a message and I'm not sure if it's real."
I walked over. She was looking at a notification from the school's learning platform. It was a message from a name she didn't recognize, with a link to "complete your assignment."
"Did your teacher say anything about this assignment?"
She thought for a moment. "No. But it says it's from the school."
That was the moment I realized she was already encountering messages that looked legitimate but might not be. And she had the right instinct—she paused and asked.
But not every kid does. And the instinct to pause isn't automatic. It needs to be practiced.
Teaching a child to question messages isn't about making them afraid. It's about giving them a mental toolkit they can use when something feels off.
Why Kids Are Vulnerable
Let me be honest about why kids are targets.
Children are online earlier than ever. According to a recent study by Ofcom, a majority of kids had their own smartphone by the age of 11, and nearly a quarter had one by age seven. Most kids have access to the internet through tablets and phones before they're in primary school.
Scammers know this. And they tailor attacks accordingly.
Kids are targeted because:
They're trusting and curious
They don't have the same "spidey sense" adults develop over years online
They may not recognize the signs of a scam
They often have access to accounts—school portals, gaming accounts, messaging apps
They don't know to check for red flags like urgency or requests for personal information
The need for digital skepticism training is real, and it's urgent. But the way you teach it matters. Fear-based warnings can create anxiety and lead kids to avoid asking questions when something suspicious shows up. That's the opposite of what you want.
The Framework: A Digital Safety Rule for Kids
I've developed a simple framework for teaching kids to question messages. It's based on three questions that are easy to remember and not scary.
Rule #1: Stop and Check
Before clicking anything, stop. Take a breath. Ask yourself: was I expecting this?
This is the simplest rule, and it's the one that prevents the most problems. Most scams rely on urgency—the message creates panic that makes you act before you think.
How to teach it:
Ask your child: "If someone sent you a message that said 'you won a free game' and you weren't expecting it, what should you do first?"
The answer: stop and think. The free game isn't going anywhere. The urgency is manufactured.
Rule #2: Who's Sending This Message?
If the message is unexpected, check the sender.
Who's asking? Is it from a known contact? A friend or family member? If the sender isn't someone you know or interact with, that's a red flag.
What's the domain? Look for spelling variations or unusual addresses. If the email says it's from "Google" but the domain is "g00gle-verify.com," something's not right. Is the sender's name or display name an exact match for the person or organization they claim to be?
Is the tone and language normal? Messaging styles have patterns. If your friend sends a message that looks like a bank notice or uses a new style, ask them about it.
How to teach it:
When your child receives a message, teach them to check the sender's name or username. Ask: "Do you recognize this person? Have you ever gotten a message like this from them before?"
Rule #3: Is This Creating Urgency?
The most common manipulation technique is urgency.
Scammers want you to act before you think. They want you to be in a panic, because panic short-circuits your ability to slow down and check.
How to teach it:
Teach your child to recognize urgency tactics:
"You'll be locked out"
"You need to click now"
"This is limited time"
"Your account will be deleted"
"Do this immediately"
The rule: If a message says you need to act immediately, it's almost always a scam. Legitimate messages don't create false urgency.
What to Say: A Script for Parents
Here's the conversation I had with Ella. It's adaptable for different ages.
The Setup
"Ella, I want to talk to you about messages you might get online. Sometimes people send messages that aren't true. They might try to get you to click a link or give them information. I'm not telling you this to scare you—I'm telling you because I want you to know what to do if it happens."
The Three Rules
"Here are three things to check when you get a message you're not sure about."
First: "Stop and ask yourself: did I expect this message? If you weren't expecting it, that's a good reason to pause."
Second: "Check who sent it. Do you recognize the person or company? Does the address look right? If not, that's another reason to pause."
Third: "Is the message making you feel like you need to act right now? If it says 'you need to click this immediately' or 'your account will be locked,' that's a sign it might not be real."
The Action Plan
"If you get a message that makes you feel unsure, here's what I want you to do:
Don't click anything. Just leave it.
Come find me or Mom. Tell us you got a message that looks suspicious.
We'll figure it out together. There's no such thing as a silly question about this. You're never in trouble for asking."
Practice, Not Perfection
The best way to teach digital skepticism is to practice it regularly, ideally daily.
The "Suspicious Message Hunt"
When I check my email, I sometimes show Ella examples of messages that are obviously fake. I'll ask her: "What do you see that's weird about this?"
She's gotten good at spotting the signs—the odd address, the urgency, the request for something I wasn't expecting. It's become a bit of a habit.
The "Good Message" Conversation
It's equally important to talk about legitimate messages so your child doesn't become paranoid.
When she gets a legitimate notification—a school message, a family invitation, or an update from a known service—I point out why it's okay. "Look, this is from your school's platform, and the domain is correct. You were expecting this because your teacher mentioned it in class. It's safe."
This reinforces the difference between real and fake messages and keeps the practice balanced.
The "It's Always OK to Ask" Rule
The most important thing I've taught Ella: there's no punishment for asking.
If she's unsure about a message, she comes to me or Emily. She's not afraid she'll get in trouble. She knows we'll look at it together. The judgment is on the message, not on her.
What to Do When Your Child Receives a Suspicious Message
If your child comes to you with a suspicious message, here's what to do:
Step 1: Stay Calm
Don't react with alarm. Your child will mirror your reaction. If you're calm, they'll stay calm. A panicked reaction can make them feel like they've done something wrong for showing you the message.
Step 2: Walk Through the Three Rules Together
Did you expect this message? (No.)
Who sent it? (The display name might look familiar, but checking the actual sender usually makes it clearer.)
Does it create urgency? (Yes.)
Step 3: Verify It
If it's from a school or known service, go to the website directly. Don't click the link. If it's a platform your child uses, look at the legitimate URL pattern and compare.
Step 4: Block or Delete
If the message is confirmed to be suspicious, report it through the appropriate platform and delete it.
Step 5: Follow Up
After a suspicious message, check your child's accounts for any changes that might indicate a compromise. It's a good opportunity to review security settings without creating worry.
The Bottom Line
Teaching digital skepticism to an eight-year-old is one of the most important things you can do for their online safety.
Kids are going to encounter suspicious messages. It's not a question of if, but when. The goal isn't to make them afraid—it's to give them tools they can use:
Stop and check
Look at the sender
Ask: is this creating urgency?
Come to you with questions
The goal isn't for your child to be a security expert. It's for them to have the confidence to pause and ask before they click.
Dave C. — Five minutes now beats five hours later.
No notes on this sheet yet.