What to do if your child clicks a scam link in a text message

If your child clicks a scam link in a text message, the first step is to disconnect their device from the internet by turning on flight mode and closing the web browser. Next, reassure them that they are not in trouble, as scammers use clever tricks that fool adults every day. Once the device is offline, you can safely check what information was shared and update any compromised passwords using a different phone or computer.

Seeing a child interact with a suspicious text message can cause an immediate spike of anxiety for any parent or teacher. Mobile phones are our lifelines, holding our photos, communications, and often our payment details. When a scammer breaches that personal space, it feels highly invasive. However, clicking a link is a very common mistake. Scammers design these messages to look incredibly realistic, often pretending to be trusted organisations like Royal Mail, a high street bank, or a delivery company.

The most helpful thing you can do right now is take a deep breath. A clicked link is not an automatic catastrophe. Modern smartphones have excellent built-in security that prevents most automatic infections. By taking a few practical, methodical steps, you can secure the device, protect your family’s data, and turn a stressful moment into a valuable learning experience for your child.

Disconnect the phone and stay calm

The moment you realise a suspicious link has been clicked, your main priority is to stop the phone from communicating with the scammer’s server. You do not need any special technical skills to do this. Simply swipe down on the phone screen and tap the aeroplane icon to turn on flight mode. Alternatively, you can go into the settings menu and manually turn off both the Wi-Fi and mobile data. This instantly cuts the connection and prevents any harmful files from downloading in the background.

Once the phone is offline, you need to close the web browser completely. Do not just minimise the app or go back to the home screen. Swipe the browser app away so it is fully shut down. If the text message tried to persuade your child to download a new app, check the phone’s recent downloads folder and delete anything unfamiliar. Because the phone is now in flight mode, you can explore the settings safely without worrying about the device sending data out.

Try to keep your own stress levels low while doing this. If you panic, your child will panic. Treat the phone like a dropped plate. It is an accident that needs clearing up, rather than a disaster that requires shouting. Taking calm, deliberate steps shows your young person that digital emergencies can be managed easily. This reassures them that you are exactly the right person to come to when things go wrong online.

How to talk to your child about what happened

Children often feel a deep sense of shame or embarrassment when they realise they have been tricked by a scam. They might try to hide the mistake or lie about what they tapped, fearing they will lose their phone privileges or be told off. Your reaction dictates whether they will come to you the next time something goes wrong. Start by telling them clearly that they are absolutely not in trouble.

Explain that the people sending these texts are professionals who use highly advanced tools to make their messages look perfect. A text pretending to be a missed parcel delivery can feature the exact logos, colours, and fonts of a real postal service. By pointing out how clever the trick was, you lift the blame from your child’s shoulders. Remind them that thousands of adults fall for these exact same messages every week.

Once they feel safe, ask them gently what happened on the screen after they clicked the link. Did they type in their name, an email address, or a password? Did the website ask them to log into their gaming account or social media? Getting these details is much easier when the child knows you are working together to fix a problem, rather than interrogating them for a punishment. Listen to their answers carefully and thank them for being honest.

Assessing the risk and protecting your accounts

Simply clicking a link is rarely enough to compromise a modern smartphone. The real danger comes from what happens on the website the link opens. If your child just looked at the page and closed it without typing anything, the risk is incredibly low. The phone’s security systems are designed to handle everyday browsing mistakes safely. You can usually clear the browser history, turn flight mode off, and carry on as normal.

However, if your child entered any personal details, you need to act quickly. If they typed in a password, use a completely different device to log into that account and change the password immediately. You can use your own laptop or phone for this. If they use that same password for their email, social media, or gaming accounts, you must change those too. Scammers will often try a stolen password across multiple popular services to see what else they can access.

For older teenagers who might have their own debit card, ask if they entered any bank details. Some scams convince the reader to pay a tiny shipping fee for a redelivered parcel. If card details were shared, call the bank straight away using the number on the back of the physical card. The bank will cancel the card and issue a new one. This keeps the money entirely safe and stops any future fraudulent payments.

Reporting the scam and blocking the sender

Reporting the scam helps protect other families and disrupts the scammers’ networks. In the UK, you can forward suspicious text messages to the number 7726. This is a free service provided by mobile phone operators. When you forward a message to 7726, your provider can investigate the origin of the text and block the sender from the network. It takes only a few seconds and makes a real difference.

You should also report the incident to Action Fraud, the UK’s national reporting centre for fraud and cybercrime. You can do this easily through their website. While the police might not investigate a single clicked link, your report adds to a national picture. This data helps authorities track down large criminal operations and issue public warnings about new types of text message scams.

Finally, block the number on your child’s phone. Open the text message thread, tap on the sender’s details, and look for the option to block the contact. This stops that specific scammer from trying again from the same number. It is a small but satisfying step that gives your child a sense of control over their own inbox. It also provides a neat conclusion to the incident, showing that the problem has been dealt with permanently.

Building resilience against future AI scams

The landscape of online safety is constantly shifting. The recent Online Safety Act aims to place more responsibility on tech companies to protect UK users, but the law will take time to change the landscape completely. Meanwhile, scammers are using artificial intelligence to write flawless text messages, clone voices, and create fake images. This makes spotting deception harder than ever for adults, let alone children.

The best defence is a healthy sense of suspicion. Teach your child to pause before they tap. If a message creates a sense of urgency, claiming an account will be locked or a parcel returned, that is a huge warning sign. Scammers rely on panic to make us act without thinking. We need to teach young people to take a breath and verify the information through a separate route, like opening a fresh browser window and going directly to the official website.

Having these conversations can sometimes feel dry or overly technical. That is why our Safety Spotters books turn these lessons into stories children remember. By reading about relatable characters who face and overcome digital tricks, children learn to spot AI-enabled deception naturally. They absorb the warning signs without feeling lectured, making them far better equipped to handle the next suspicious message that pings into their phone.

Try this at home

1. Set up a family cooling-off rule: Agree that nobody in the house clicks a link in an unexpected text message without waiting ten minutes first. This pause ruins the scammer’s tactic of creating false urgency.
2. Practise forwarding to 7726: The next time you get a spam text on your own phone, sit down with your child and show them how to forward it to 7726. Make it a normal part of your digital routine.
3. Review passwords together: Spend five minutes looking at how your child manages their passwords. Help them set up a unique, strong password for their primary email account, as this is the key to resetting all other accounts.

Frequently asked questions

Can a phone get a virus just by opening a text message? Simply opening and reading a text message is entirely safe. The danger only arises if the user clicks a link inside the message and downloads a file or enters personal information on the resulting website.

Should I reset my child’s phone to factory settings? In the vast majority of cases, a factory reset is completely unnecessary. Unless your child has downloaded and installed an unknown app from outside the official app store, clearing the browser history and restarting the phone is usually enough.

How do scammers know my child’s phone number? Scammers often use computers to generate and send messages to millions of random number combinations at once. They do not usually know who owns the phone, nor do they know it belongs to a child. They are simply hoping someone will click the link.

What if the text message looks like it came from a friend? Scammers can spoof phone numbers or hack into social media accounts. If a message from a friend contains a strange link or sounds out of character, tell your child to call or speak to the friend in person to check if it is genuine.

If you want to help your family or classroom build lasting confidence online, you can download a free digital copy of our introductory story for parents and teachers at safetyspotters.com/free.