BULLETPROOFONLINE

The Anti-Scam Playbook

Free, plain-English help to spot scams and know exactly what to do if one reaches you.

Open the three kits
Chapters cleared
0/30
Checklist items done
0/18
An adult helping an older parent look at a phone together at a kitchen table

2026 Edition

Confirm the source yourself before you send money.

$20.9B1

U.S. internet-crime losses, 2025

Reported losses, up 26% from 2024

1.0M1

Complaints in a single year

1,008,597 complaints

$7.2B1

Crypto investment fraud

Reported investment-fraud losses

1,400%2

Rise in impersonation scams

On-chain impersonation, year over year

Find a topic

CURRENT

What is going around now

All current alerts
  • September 28, 2026 · FTC Consumer Alert

    Health insurance searches during open enrollment

    Scammers and dishonest sellers pay to appear above Medicare.gov and HealthCare.gov while people look for a plan.

    What to do: Type Medicare.gov or HealthCare.gov yourself. Do not use a phone number or a link from an advertisement.

    Official source
  • September 17, 2026 · FBI IC3 public service announcement

    Callers pretend to be police or a government office

    The FBI says impersonators are still threatening arrest, a fine, or a missed court date, and then demanding payment.

    What to do: Hang up. Look up the agency yourself. No police department or court collects payment by gift card, wire, or cryptocurrency.

    Official source
  • September 15, 2026 · FTC Consumer Alert

    Scammers pretend to sell farm equipment

    The Federal Trade Commission says scammers pose as equipment sellers in social media and search ads, then take a wire deposit for a tractor that is never delivered.

    What to do: Search the business name plus the word scam before you pay. Do not wire money, send a gift card, or pay with cryptocurrency because an ad told you to.

    Official source

START HERE

One hour, in order

If you are new to this, do not try to read everything tonight. These six steps cover the habits that stop the most common losses.

  1. 01Read what phishing isThe pattern behind fake emails, fake ads, and look-alike pages.
  2. 02Lock the email accountA password manager, then a passkey or a hardware key on email before anything else.
  3. 03Learn the long investment scamHow a friendly text becomes a fake trading account.
  4. 04Set the text-message ruleNo links from unexpected texts. Open the real application instead.
  5. 05Practice twenty scenesChoose the response, then read why the other choices fail.
  6. 06Check your checklistMark only the protections that are actually turned on.

FIELD KITS

Three kits, one habit

2025 U.S. LOSSES

Where the money went

Reported losses in billions. 1

FBI IC3 reported losses, in billions. Phishing is the most common complaint. Investment fraud is the expensive one.

  • Investment fraud$8.65B 41%
  • Business email compromise$3.05B 15%
  • Tech support$2.13B 10%
  • Romance / confidence$0.93B 4%
  • Government impersonation$0.80B 4%
  • Phishing, direct loss$0.22B Volume #1

LOCK ORDER

The order to turn protection on

  1. 01

    Passkeys

    Bound to the real site. A lookalike page cannot use them. Turn them on wherever a service offers them.

  2. 02

    Hardware key

    A YubiKey-class key for email and your password manager. Buy two. Register both. One stays offline.

  3. 03

    Authenticator app

    Authy, Google Authenticator, or the code built into your password manager. Fine for everything else.

  4. 04

    Text message codes

    Better than a password alone. Still stealable by a SIM swap. Last resort, never for crypto or email.