Skip to main content

Literal Thinking, Autism, and Online Scams

How literal thinking patterns interact with scams, phishing, and manipulative messages — and concrete rules that work.

Overview

Many autistic children, and many children with related profiles, are highly literal thinkers. They take messages at face value, believe what they read unless given a reason not to, and assume people online say what they mean. These are honourable qualities in a person — and they are precisely what scammers and manipulative messages take advantage of.

This guide is for parents whose children find it hard to recognise when something online is not what it claims to be: phishing messages, 'official' DMs from games, fake giveaways, urgent help requests from 'friends', and AI-generated content.

Starting from strengths

Literal thinkers are often the people who notice when wording is inconsistent, when a 'bank' uses the wrong logo, or when an 'official' message has the wrong domain name. With the right rules, your child can become exceptionally good at spotting scams — better than many neurotypical adults.

Common challenges and what helps

Assuming a message is true because it sounds official

Teach the rule: 'Anything that says "act now" or "do not tell anyone" is treated as a scam by default.' Concrete trigger words beat vague advice.

Believing in-game 'free V-Bucks' or 'Robux' offers

A simple, repeated phrase: 'Free in-game money is never real. Anyone offering it wants something from you.'

Trusting 'I'm your friend, my account got hacked' messages

Agree a family pre-arranged check phrase your real friends could verify offline, or a rule: 'I always check in person or on the phone before sending anything.'

Falling for AI-generated 'celebrity' or 'official' content

Watch real and fake clips together and play 'spot the giveaways'. Make it routine, not a one-off.

Practical steps

  • Write a short, printable scam-rules card with concrete trigger phrases.
  • Remove stored payment details and gift card balances where possible.
  • Agree a 'I always check with my grown-up before clicking links' rule.
  • Set up a separate, low-balance account or prepaid card for in-app purchases.
  • Practise 'what would a scammer do' as a low-stakes family game.
  • When a scam does land, do not shame — debrief calmly.
  • Forward suspicious texts to 7726 (free UK reporting line).

Conversation starters

Phrases that help

  • Has anyone offered you free in-game money or gifts this week?
  • Have you had any messages that said you had to act really fast?
  • Did you spot any scams I should know about?
  • If a 'friend' messaged from a new account, what is our check?
  • Want to play 'real or fake' on these videos for a few minutes?

Working with school

Many schools teach phishing recognition in computing lessons. Ask if your child's lessons include scam-recognition examples at the right level. The National Cyber Security Centre publishes free school resources. If your child is repeatedly targeted, the school's designated safeguarding lead should know.

When to escalate

Report scams to Action Fraud (0300 123 2040) and forward scam texts to 7726. If money has been stolen, contact your bank immediately. If a 'scam' is in fact grooming or sextortion, report to CEOP at ceop.police.uk and call 101. The NSPCC (0808 800 5000) can support.

Read next

Frequently Asked Questions

Last reviewed: 2026-05-16 · This page is educational guidance, not a substitute for clinical advice, safeguarding professionals, or emergency services.

This is practical educational content to support families. For case-specific concerns about a child's safety, contact the NSPCC helpline on 0808 800 5000 or your local safeguarding team.