My literal-thinking child keeps falling for the same scam. Why?

Often because the rule they have been given is too abstract. 'Be careful online' does not give the brain a concrete decision rule. 'If a message says act now or it's free V-Bucks, it is a scam' does.

Should I just block my child from messaging?

Usually not. Targeted rules + transparency + practice tend to work better than blocking. Blocking also removes legitimate friendships.

What about AI-generated scams?

These are growing fast. Watch examples together, talk about how AI generation works, and build the habit of double-checking before believing or sharing anything urgent.

Literal Thinking, Autism, and Online Scams

How literal thinking patterns interact with scams, phishing, and manipulative messages — and concrete rules that work.

Overview

Many autistic children, and many children with related profiles, are highly literal thinkers. They take messages at face value, believe what they read unless given a reason not to, and assume people online say what they mean. These are honourable qualities in a person — and they are precisely what scammers and manipulative messages take advantage of.

This guide is for parents whose children find it hard to recognise when something online is not what it claims to be: phishing messages, 'official' DMs from games, fake giveaways, urgent help requests from 'friends', and AI-generated content.

Starting from strengths

Literal thinkers are often the people who notice when wording is inconsistent, when a 'bank' uses the wrong logo, or when an 'official' message has the wrong domain name. With the right rules, your child can become exceptionally good at spotting scams — better than many neurotypical adults.

Common challenges and what helps

Assuming a message is true because it sounds official

Teach the rule: 'Anything that says "act now" or "do not tell anyone" is treated as a scam by default.' Concrete trigger words beat vague advice.

Believing in-game 'free V-Bucks' or 'Robux' offers

A simple, repeated phrase: 'Free in-game money is never real. Anyone offering it wants something from you.'

Trusting 'I'm your friend, my account got hacked' messages

Agree a family pre-arranged check phrase your real friends could verify offline, or a rule: 'I always check in person or on the phone before sending anything.'

Falling for AI-generated 'celebrity' or 'official' content

Watch real and fake clips together and play 'spot the giveaways'. Make it routine, not a one-off.

Practical steps

•Write a short, printable scam-rules card with concrete trigger phrases.
•Remove stored payment details and gift card balances where possible.
•Agree a 'I always check with my grown-up before clicking links' rule.
•Set up a separate, low-balance account or prepaid card for in-app purchases.
•Practise 'what would a scammer do' as a low-stakes family game.
•When a scam does land, do not shame — debrief calmly.
•Forward suspicious texts to 7726 (free UK reporting line).

Conversation starters

Has anyone offered you free in-game money or gifts this week?
Have you had any messages that said you had to act really fast?
Did you spot any scams I should know about?
If a 'friend' messaged from a new account, what is our check?
Want to play 'real or fake' on these videos for a few minutes?

Working with school

Many schools teach phishing recognition in computing lessons. Ask if your child's lessons include scam-recognition examples at the right level. The National Cyber Security Centre publishes free school resources. If your child is repeatedly targeted, the school's designated safeguarding lead should know.

Signs to take seriously

!Unexplained charges, gift-card purchases, or missing money.
!New accounts created at someone else's suggestion.
!Messages from 'official' senders your child has acted on without telling you.
!Sharing of passwords or account details with online contacts.
!Sudden empty in-game inventory or 'traded' items.

When to escalate

Report scams to Action Fraud (0300 123 2040) and forward scam texts to 7726. If money has been stolen, contact your bank immediately. If a 'scam' is in fact grooming or sextortion, report to CEOP at ceop.police.uk and call 101. The NSPCC (0808 800 5000) can support.

Frequently Asked Questions

Last reviewed: 2026-05-16