How to avoid giving scammers the keys to your life
In brief, if you do not have time to read everything
Your accounts (Google, Apple, Yandex) are the keys to your home. Lose them and you lose photos, email, and access to your phone.
A code from an SMS is a master key. You must not dictate it to anyone, ever, no matter who the person claims to be.
Anyone who calls/writes and asks for a code, rushes you, or scares you is a scammer. Without exceptions.
Write passwords down on paper and keep them at home. Not in your phone, not in chats, not in a photo.
If something does not work, there is live support at the bottom of the article that will help for free.
Imagine that the internet is a large house and you live in it. The house has doors: the front door, doors to rooms, a door to the storage closet. Each door has its own key. To get to your photos, letters, and money, you need to open the right door with the right key.
Your keys are passwords, your phone number, and codes from SMS messages. As long as you have the keys, the house is yours. If a key gets to someone else, someone else will enter the house. And carry everything out.
This article is about how not to hand over your keys. It is not about complex technology. It is about a simple rule that saves people every day. Read it yourself and forward it to your parents — it is more important than any setup guide.
First, no illusions
Let us say it directly, because polite understatement is useless here. Scammers are not rare, and they are not “somewhere out there.” This is an industry. They call every day, thousands of people, using polished scripts. They know how to speak in the calm voice of a “bank employee,” how to scare, how to rush. They know your name, the last digits of your card, your granddaughter’s name, and your registered address. The illusion of safety is that absolutely ALL of this about you can be found by anyone. There are special bots, databases, OSINT tools, and social engineering for this. Oh, yes! There are also neural networks that can speak in your voice or the voices of your loved ones, or even look like someone you know. Right on video. Right during a video call.
Do not think, “I will not be fooled, I am not stupid.” The people who think that are exactly the ones who get fooled. Professors, accountants, and former military personnel get fooled. Not because they are stupid, but because the scammer caught them off guard, pressed on an emotion, and did not give them time to think.
The only protection is not intelligence, but one iron rule that works even when you are confused. It is below.
What keys you have
Before protecting the keys, you need to know what they are. There are three main key rings.
Google account — if you have an Android phone. This is the password for Gmail, apps, photos, and the phone itself. If you lose it, the phone may “lock” and ask for a password you do not remember.
Apple Account (iCloud) — if you have an iPhone. The same thing: photos, contacts, access to the phone. Apple restores access very strictly — if you lose it, getting it back is hard.
Yandex ID — if you use Yandex: Mail, Taxi, Maps, Disk. One key to everything at once.
These are the three main doors of your house. We will start putting things in order with them.
What to write down on paper
Take an ordinary sheet of paper and a pen. Not a phone — paper. For each account you have, write down:
What account it is — Google, Apple, or Yandex.
Email — for example, `[email protected]` or `[email protected]`.
Login — if you know what it looks like.
Phone — the number linked to the account.
Password — carefully, legibly, without mistakes, keeping uppercase and lowercase letters exactly right.
Why on paper and not in the phone? Because if the phone breaks, gets lost, or “locks,” the password list inside it will disappear with it. Paper will remain at home in any case. It is your spare key.
Where to keep this paper
Simple rules whose violation costs people everything:
Do not send passwords in Telegram, WhatsApp, or SMS — not even to loved ones, not even to yourself!
Do not photograph the sheet with passwords. The photo goes to the cloud, and the cloud can be hacked.
Do not dictate passwords to a “phone technician,” a “support specialist,” or a neighbor.
Put the sheet in an envelope and keep it at home — in the same place as your documents, internet contract, and passport.
This is not paranoia. This is like keeping spare keys to your apartment — you would not hand them out to passersby.
The most important key is the code from an SMS
Sometimes a website or app sends a code in a message:
Your code: 482193. Do not share it with anyone.
This code is a master key. It proves that the phone number is yours and opens access to an account, to money, to Gosuslugi (Госуслуги). Whoever has the code becomes you for a minute.
And here is the iron rule for which this entire article was written:
## A code from an SMS must not be shared with anyone. Ever. No matter what words they use.
Even if the person on the other end says:
“I am from the bank, there is a suspicious transaction on your account”;
“I am from the police, a case has been opened”;
“I am from the security service or the military enlistment office”;
“I am from Telegram / Gosuslugi support”;
“I will help you connect a VPN / protect your connection”;
“your relative is in trouble, you need to confirm this.”
Real employees of banks, the police, and government services never ask for a code from an SMS. Never. If someone asks a person for a code, that someone is a scammer. Period. Not “possibly.” Not “we need to sort it out.” It is a scammer — hang up and add them to the blacklist.
How they actually deceive people (new schemes in 2026)
So the rule does not sound empty, look at real scripts scammers are using right now. If you recognize them, you will not fall for them.
“A bouquet/package for you.” They call, supposedly from a delivery service: there are flowers or a package for you, dictate the code to receive it. The code is actually for your account. Then “Roskomnadzor calls”: your number has been hacked, urgently save your money. This is all one performance with several “actors.”
“You were hacked through your voice.” They say that during the previous call they recorded your voice, faked it using a neural network, and hacked Gosuslugi. It sounds frightening and technical — and that is exactly the calculation, based on fear. The goal is the same: to make you confirm something or dictate something.
SMS bombing. Dozens of codes and notifications suddenly start arriving on your phone every hour. In the middle of the panic, an “operator employee” calls: “you are under attack, to stop it, dictate the code from the latest SMS.” The flood of messages was created on purpose so that you get tired and give in.
“We will intercept the power of attorney.” They ask you to log in to Gosuslugi, install GosKlyuch (Госключ), and sign some power of attorney with a nice logo — supposedly to protect yourself. In reality, you are signing access for scammers with your own hands. Then a “different police officer” says the first one was a crook — so that you get confused and trust the second one.
Notice what they all have in common? Everywhere there is haste, fear, and a request to press something or dictate something. That is the scammer’s signature, whatever script they use.
It is also important to remember that there are more sophisticated methods — scammers send an email or messenger message asking you to vote for a child in a contest, they send .pdf or .apk files, various links — do not open them! Do not click! Do not fall for it! If an unknown person writes and asks you to do something, click somewhere, or help with something, ignore them and add them to the blacklist. The internet is not about politeness. The internet is about information and owning it. Your passwords, SMS codes, and messenger chats are yours only! No one has the right to take your time except the people close to you.
Separately: scammers and VPNs
Since our site is about bypassing blocks, we will say an important thing directly. Scammers have learned to use the topic of VPNs. They call and offer to “help connect a VPN so communication works” — but in reality they ask you to install an app from their link. Such an app gives them access to your chats, photos, bank, and passwords.
So the rule about doors works here too:
Download a VPN app only from the App Store, Google Play, or the project’s official GitHub — never from a link in a call or message from a stranger. Safe links will be in the next articles.
No one from “support” should ask you to dictate a code or password, or install a remote access program (RustDesk, AnyDesk) over the phone.
If they offer to “set it up for free” and rush you, it is the same scammer haste.
We will say at the end where you can safely choose a working VPN. Without calls and without “specialists” who rush you somewhere.
If you have already clicked or said something
Do not panic, there is time if you act quickly.
Call the bank using the number on the back of your card (not the number you were given over the phone!) and report the situation.
Change the passwords for your main accounts (Google / Apple / Yandex) and for the bank — from another device, if you have one.
If you installed an app at someone else’s request, delete it.
Tell your loved ones — there is nothing shameful about falling for it; we have all been there, even me [yes, I am an experienced old-timer — I fell for it twice, so I know what I am talking about]. It is essential that someone help you and not let the second “wave” finish you off.
A search engine is your best friend. You can always go to a bank’s page or any service’s page and see the real phone number, and see the company’s real website. Be careful — read links you are sent carefully and compare them with links from the search engine; a difference of one letter can cost you everything.
There is nothing to be ashamed of. Millions fall for these schemes because they are built professionally. The important thing is not to blame yourself, but to close the doors quickly.
The main point
Passwords and codes from SMS messages are your keys. Do not give them to anyone, just as you would not give your apartment keys to a stranger at the entrance. Whoever calls, rushes you, and asks for a code is a scammer; hang up. This rule will protect you better than any technology.
If it does not work, we will help
If something is unclear, something will not install, or you are not sure whether a call was real, ask a live person before clicking anything.
We have a support service, you can write to us:
Telegram support bot: @Ateo_help_bot
It is better to ask once and make sure than to restore access later.
This is part of the “Instructions for your mom” series: simple guides that you will not be embarrassed to forward to your parents. Save and share — this may be exactly what saves someone’s money.