What to Do After Your Child Falls for a Scam

Start with a calm conversation, not blame

Discovering that a child has responded to a suspicious message can be upsetting, particularly if the incident involves a gaming account, social media profile or an unexpected payment request. However, an angry reaction can make a child reluctant to explain what happened. Begin by thanking them for telling you, or by making it clear that they can speak honestly without being embarrassed. Scammers often rely on pressure and misplaced trust, so the incident should be treated as a safety problem rather than a character flaw.

Ask the child to describe the events in their own words. Find out where the interaction started, who appeared to contact them, what the person requested and what happened next. Establish whether they clicked a link, entered account details, shared a verification code, downloaded a file, sent an image or transferred something of value. Avoid asking several accusatory questions at once. A clear timeline will make the next decisions easier.

• Which platform or game was involved?
• What did the message or person ask the child to do?
• Was any personal information or account access shared?
• Did the child send money, gift cards, images or other items?

Protect affected accounts and personal information

The response depends on what the child disclosed or accessed. If account credentials were shared, use the platform's official recovery and security guidance to protect the affected account. Where appropriate, change exposed passwords, review active sessions and enable available additional authentication protections. If the same password was used elsewhere, consider those accounts potentially affected too. Use the legitimate service rather than following further instructions from the person who initiated the suspicious contact.

If the child shared a verification code, personal details or information that could help someone impersonate them, consider which other accounts or services might be affected. Contact the relevant provider through its official support channel and explain what was disclosed. If a file was downloaded or an unexpected application was involved, consult the device provider's official security guidance. Do not assume that deleting a message or closing a browser window resolves the underlying problem.

• Secure accounts using their official recovery procedures.
• Review account activity and available security settings.
• Contact affected platforms if access or personal information was compromised.
• Seek appropriate technical support if a device may have been affected.

Preserve evidence and report the incident

Before removing messages or closing accounts, preserve useful information where it is safe and appropriate to do so. This might include screenshots of conversations, profile names, message dates, transaction references and the wording of suspicious requests. Keep the original records where possible. Do not encourage the child to continue communicating with the suspected scammer to obtain more evidence, and avoid sharing sensitive material more widely than necessary.

Report the account, message or activity to the relevant gaming platform, social network or service provider. If money or a payment method was involved, contact the relevant payment provider through its official channel and ask what protective steps are available. Where threats, extortion, exploitation or serious identity misuse are involved, consider contacting the appropriate local authorities or specialist child-protection service. Reporting routes and legal responsibilities vary by country.

Understand what parental monitoring can and cannot establish

Parents sometimes need additional context when a child struggles to explain an incident or cannot remember where a conversation began. mSpy is a commercial app with an online dashboard. Its official website lists features including GPS location tracking with route history, geofence alerts, a Wi-Fi network list, monitoring of supported messaging and social apps, SMS, email, keyword alerts, call logs, browser history and bookmarks, and photo and video viewing. Depending on the device and configuration, relevant information may help parents identify activity that deserves further discussion.

These features do not establish that every suspicious interaction has been found, identify every scammer or guarantee that an account or device is safe. Availability depends on the operating system, version, plan, setup and required permissions. More intrusive functions, including keystroke logging, periodic screen capture, live screen streaming and call recording where lawful, need especially careful consideration. They should be proportionate, age-appropriate and explained to the child. Monitoring cannot replace official account recovery, platform reports or appropriate support.

Rebuild confidence and agree on the next response

After the immediate risks have been addressed, revisit the circumstances without turning the conversation into a lecture. Ask what made the request seem believable and whether anything made the child uncomfortable. Discuss one or two practical changes, such as checking unexpected requests with a parent, using official support channels or refusing to share verification codes. An open discussion about parental controls is also important. Children should understand what information a tool such as mSpy may collect and why a parent or guardian considers it appropriate.

Consent and transparency matter in family supervision. Explain the purpose of any monitoring, consider the child's age and privacy, and review whether the arrangements remain proportionate. Employers monitoring company-owned devices should separately provide employee notice and a clear written policy. Laws differ by country, so check local rules rather than assuming that a particular monitoring arrangement is permitted. The next step is to write down the incident timeline, identify the affected accounts and work through the relevant official recovery and reporting channels with your child.

Questions readers ask