How to protect older people from the risks of the Internet

In recent years, more and more older adults have joined the digital world and use email, mobile phones, and social media daily; for many, it's an essential tool for connecting with others and managing administrative tasks. While the internet offers a sense of connection and independence, it also opens the door to scams and risks that can affect their finances, privacy, and even their emotional well-being.

It's important to remember that no one is completely safe : even experienced users can fall victim to well-prepared scams. The good news is that, with some simple guidelines, support, and basic tools, it's possible to significantly reduce exposure to fraud and browse the internet with peace of mind. Furthermore, various organizations such as the Internet User Security Office (OSI) , the National Police , and INCIBE (telephone 017) offer ongoing information and assistance, and there are initiatives like Experiencia Sénior (Senior Experience) with practical guides for older adults.

Most frequent digital risks in older people

The most common online dangers are well-identified and recur with variations: scams and frauds designed to exploit a lack of digital experience , identity theft to steal data (phishing, smishing, vishing), and malware that sneaks in through links or attachments. Recognizing them is the first step to neutralizing them.

The consequences of these attacks include financial loss, identity theft, and unauthorized access to accounts, which often leads to distrust and fear of using technology. Even so, the balance can tip in favor of safe use if preventative habits are adopted and second opinions are sought when in doubt.

• Frauds and scams: messages or calls that try to get the victim to pay, share data, or install something without thinking.
• Phishing: fake emails or websites that impersonate banks or companies to capture credentials.
• MalwareMalicious software that is downloaded accidentally and compromises the device and information.

Phishing: emails and websites that impersonate legitimate entities

Phishing is one of the most widespread techniques. Criminals impersonate banks, shipping companies, or other organizations with very credible emails containing links to fake websites. If clicked, these links can lead to the theft of personal and banking information or the installation of malware. The golden rule is to be wary of unexpected messages, check the sender's address, and never open suspicious links or attachments.

Smishing: the same scam, but via SMS or messaging apps

In smishing, fraud is perpetrated via SMS, WhatsApp , or voice messages . These messages typically warn of a held shipment, an account problem, or an irresistible offer designed to entice the recipient to click a link. These links lead to fake websites or install malware that facilitates the theft of passwords, credit card information, or personal data . Legitimate companies do not request sensitive information through these channels.

Vishing: phone calls to extract information

Vishing uses phone calls . Sometimes scammers impersonate a bank, utility company, gas company, or technical support (e.g., “Microsoft”). They try to get the person to give out card numbers, passwords, or install remote control programs. Giving up this information can lead to unauthorized charges and identity theft later on.

Malware and unwanted downloads

A simple download from a malicious email or website can install software that spies on, locks, or grants unauthorized access to your device . Avoiding suspicious attachments, using up-to-date antivirus software, and downloading only from official websites are highly effective barriers against these infections.

Chains, hoaxes and “too good to be true” offers

Viral messages that ask you to forward them or promise incredible discounts are often bait to collect data or spread malware . If something seems too good to be true, it usually is; it's best not to participate or share it.

Emotional impact and risk of isolation

Being scammed doesn't just affect your finances. Many older adults experience anxiety, shame, or fear after being defrauded and may stop using the internet for fear of repeating the experience, which increases their isolation. A supportive environment that avoids blaming and encourages calm questioning is key to regaining trust.

Habits and tools for safe browsing

The best protection is a combination of good habits, proper settings , and tools . With a few simple guidelines, your daily digital life becomes much safer without complicating things.

• Maintain your system and apps up to dateThe updates include security patches that fix vulnerabilities.
• Install a good antivirus: blocks most malware before it can act.
• Detects phishingBe wary of surprise messages, do not click on links or download suspicious attachments.
• Avoid public Wi-Fi for sensitive transactionsIt's best to use your home internet connection or mobile data for banking and shopping.
• Browse websites using HTTPSCheck the lock and secure address.
• Create strong and unique passwords: and enable two-step verification (2FA) when available.
• Protect your privacy on social mediaLimit who can see your posts and don't accept strangers.

Secure passwords and two-step verification

A strong password should be unique for each service and combine uppercase letters, lowercase letters, numbers, and symbols . Avoid obvious information (birthdays, grandchildren's names) and, if necessary, write your passwords down in a notebook kept at home. Where possible, enable two-step verification , which adds a temporary code on your mobile phone or another second factor.

Recommended antivirus and security programs

There are well-rated free options. Avast stands out for blocking viruses and fraudulent websites; however, it displays quite a few ads to encourage users to upgrade to the paid version. Avira protects both PCs and mobile devices and includes a VPN and regular scans. Bitdefender offers very good anti-malware and anti-phishing protection and is less pushy with its premium version, a very comprehensive alternative.

Password managers: remember effortlessly

A manager stores all your passwords in an encrypted "vault" and fills them in for you. LastPass (recommended by INCIBE) offers essential features for free, although it has faced security incidents and responded with improvements. NordPass stands out for detecting weak or reused passwords and alerting you to data breaches. RoboForm works on mobile and desktop; synchronization and advanced features require the paid version (approx. €23,88 per year ).

Browser extensions

To enhance your browsing experience, you can add extensions. IronVest (formerly Blur) encrypts and organizes passwords, making it harder to track your activity. HTTPS Everywhere forces secure connections whenever possible. Privacy Badger blocks invisible trackers without breaking websites, offering added privacy on both PC and mobile.

Safe use of mobile phones and tablets

On your phone, it's advisable to activate automatic locking with a PIN, fingerprint, or facial recognition to prevent unauthorized access in case of loss or theft. Additionally, set a passcode that only you know.

To install apps, always use official stores like Google Play or the App Store . These platforms verify apps and reduce the risk of malware. Before installing, review the permissions requested and disable any that aren't essential.

Making regular backups (in the cloud like Google Drive or iCloud, or on an external drive) is essential to avoid losing photos, contacts, and documents if the device fails, is lost, or is attacked.

Privacy on social networks and messaging

Review your privacy settings so that only your trusted contacts can see your posts. Only accept friend requests from people you know and be wary of profiles you can't verify. Remember that posting photos of minors on public profiles unnecessarily exposes them.

When faced with chain messages and alarmist or "miracle" claims, adopt a skeptical approach. Do not forward hoaxes or alerts from unreliable sources , and if a text asks you to share it widely, the wisest course of action is to stop. If in doubt, consult someone you trust.

Public Wi-Fi networks: when to avoid them

Wi-Fi in cafes, hotels, or airports is convenient, but it's not suitable for banking, shopping, or sensitive transactions . Other users could intercept information if the connection isn't fully encrypted. For important matters, use your home Wi-Fi or mobile data connection.

What to do if you suspect a cyberattack

The key is to stay calm and act methodically. First, try to identify the type of attack (phishing, smishing, vishing, malware) and prevent it from spreading: disconnect your computer from the internet if necessary, don't click on any more links or download files, and don't provide any further information.

Next, change any compromised passwords , update your system and apps, scan your device with antivirus software, and restore from clean backups. If there are any unusual bank transactions, contact your bank immediately to block affected cards and accounts via the app or by phone.

For guidance and support, INCIBE is available at 017 every day of the year from 08:00 a.m. to 23:00 p.m. You can also report fraud and cybercrime to the State Security Forces through their websites and police stations, where they will advise you on the procedure for your specific case.

The role of family and caregivers

Support makes all the difference. Calmly monitoring transfers, messages, or downloads greatly reduces risk, and remembering that there's no rush to decide nips many scams that prey on urgency in the bud. If anything raises doubts, don't hesitate to ask without fear of bothering anyone.

Emotional support is vital. Many older adults don't talk about being deceived due to shame or guilt , which prevents them from seeking help in time. Creating a trusting, non-judgmental environment makes it easier to resolve the problem and learn from what happened.

Digital literacy doesn't require turning anyone into an expert. It simply requires identifying warning signs , knowing how to manage passwords and privacy, and practicing seeking a second opinion before acting. Calmly repeating and reinforcing what has been learned helps solidify good habits.

Ten clear recommendations highlighted by specialists

From the professional field of cybersecurity, specific measures for the elderly are emphasized: protect personal information (think before publishing family photos), be wary of SMS and messages that impersonate banks or the Post Office, and remember that the bank will never ask for passwords by email or SMS.

1. Be careful what you share on social media: everything posted can become public; be prudent with family data and photos.
2. Be wary of SMS messages that ask you to click on links or confirm data; they often impersonate well-known entities.
3. Remember: the bank will never ask for passwords by email or text message.
4. Do not participate in chain messages or "contests" with dubious links; they often hide scams.
5. Enter only in secure pages (https and padlock) for sensitive matters.
6. Use your home Wi-Fi network if possible; if it is public, do not enter credentials or bank details.
7. Use strong and distinct passwords for each account; avoid carrying them in a notebook that is taken out of the house.
8. Always have antivirus on devices connected to the Internet.
9. Be alert to the vishing: calls that request data or access to devices.
10. Update your mobile phone and computer when the alert pops up; if you don't know how, don't hesitate to ask for help.

Training, resources and institutional support

Following the digital boom of recent years, the percentage of older adults using the internet has grown significantly , now exceeding daily usage by a large portion of the 65-74 age group. At the same time, the Office of Internet Security (OSI) and the National Police are promoting initiatives such as Senior Experience, offering tips and guides to enhance online safety, and there are digital skills workshops specifically for older adults in numerous municipalities.

For inquiries and emergencies, INCIBE's 017 service offers free and confidential advice every day from 08:00 a.m. to 23:00 p.m. Having these resources and family support makes it easier for older adults to maintain control and enjoy technology with confidence.

With support, practical training, and easy-to-use tools, older adults can enjoy the internet safely : they'll learn to identify scams (phishing, smishing, and vishing), protect their devices and passwords, and know who to contact if something goes wrong. Keeping software up to date, strengthening privacy settings, and seeking a second opinion when in doubt are small decisions with a huge impact on their daily security.