How scam emails, texts, DMs, and fake login pages target children — often via games and 'free' offers — to steal accounts, money, and personal details, and how to spot them.
Phishing & Smishing is scam emails, texts, and messages that trick children into revealing passwords, personal details, or money — often through games, fake prizes, or messages posing as a friend.
Phishing (scam emails and messages) and smishing (scam text messages) try to trick someone into handing over passwords, personal details, or money, or into clicking a malicious link. Children are frequently targeted through the things they use most — games, social media, and messaging — with lures like free in-game currency, 'you've won' prizes, fake account-security warnings, or messages pretending to be from a friend. Because these scams create urgency and excitement, young people can act before they think.
A scammer sends a message designed to look legitimate — a text about a missed delivery, a DM offering free V-Bucks or Robux, an email warning that an account will be closed, or a link to a fake login page that captures the password. Some hijack a friend's account first, so the message appears to come from someone the child trusts. Once a child enters details or grants access, the attacker can steal the account, make purchases, or use it to target the child's friends. Quishing (scam QR codes) and fake giveaways work the same way. The common thread is pressure to act fast and a link or form that shouldn't be trusted.
In your child's behaviour
On their device
Teach the 'stop and check' habit
Agree a simple rule: never click links or enter passwords from an unexpected message, and never hand over codes or payment to 'claim' something. If in doubt, go to the app or site directly rather than via the link, and ask you.
Lock accounts down
Turn on two-step verification (2FA) for games, email, and social accounts, use strong unique passwords (a password manager helps), and make sure recovery details are set — so a stolen password alone isn't enough.
Normalise reporting, not blame
Make clear that anyone can be fooled by a convincing scam, so your child will never be in trouble for telling you. Show them how to report and delete phishing texts (forward to 7726) and messages in-app.
In immediate danger: call 999. For non-emergency police matters, call 101.
Concerned about a child but it's not an emergency? NSPCC helpline 0808 800 5000. Childline for young people 0800 1111.
This is practical educational content to support families. For case-specific concerns about a child's safety, contact the NSPCC helpline on 0808 800 5000 or your local safeguarding team.
Was this page helpful?
Last reviewed: 2026-07-04