Guide · Privacy & safety

Fake shops and phishing: How to protect your children from online fraud

How do you handle fake shops, phishing and prize claims that children may encounter in chats, games and social networks? A clear family rule helps more than a blanket ban.

26 October 2026 · 4 min read

By Redaktion familydevice

On this page

Prepare rather than ban every message
How to spot a scam
The family rule in clear steps
If your child has already fallen for a scam

How can you recognise fake shops, phishing and fraudulent messages before your child hands over money or personal data? Children do not have to assess every message perfectly on their own. What matters is a clear routine that helps them stop and ask you.

Prepare rather than ban every message

Our assessment

Monitoring alone is not a reliable solution. Blocking an app can hide a risk that would otherwise be visible, while an open message in a group chat is immediately obvious. Instead, you should practise a simple decision sequence: do not open a link or message on your own, check the person or provider, and ask first whenever money or data are involved.

The main thing that changes with age is who carries out each step. For children aged 9–12, adults should set up accounts, check offers and confirm payments. Teenagers aged 12–16 can research and choose for themselves, but they need a reliable adult to consult before major purchases or sharing personal data. For young people aged 16–18, greater independence makes sense, while rules about money, secrets and contact with strangers remain in place. This is different from a regular in-app purchase in a familiar game, because here a message from a stranger is what sets it off.

How to spot a scam

The family rule in clear steps

Our advice

Make the key rule visible. Put one short rule where everyone can see: whenever an offer involves money, prizes, a login or personal data, your child comes to you before replying. For children aged 9–12, an adult should confirm accounts and payments. For teenagers aged 12–16, they should check offers themselves but need approval from an adult who is available. For young people aged 16–18, an agreed approach to unusual spending remains in place. ^[1]
Check links and messages first. Have your child show you the screen without opening the link. Check the sender, the context and what is being asked. If it concerns a service, look up the app you already know or the official website yourself instead of using the contact details from the message. ^[2]
Limit the payment method. Agree that your child will use only the usual payment method for a trusted service. Before completing a purchase, check the total price, shipping and any additional costs. Bank transfers, gift cards and crypto requests are off the table. ^[2]
Protect personal data and codes. Passwords, PINs, TANs, one-time codes and confirmation codes should never be shared in chats and should only be entered through the official app or website. You still need to check, even if the sender seems familiar or the account is known. ^[1] ^[3]
Check offers independently. For prize draws, purported creator or brand promotions and suspiciously low prices, read the terms, find the provider through the official channel and, if in doubt, do not buy. ^[3]

If your child has already fallen for a scam

Our advice

Stay calm and first get a clear picture of where things stand. Your child should not be afraid of how you will react.

Prevent further harm. Stop all contact, do not respond to further demands and make no additional payment.
Check accounts and money. If login details have been entered, change the password through the login page you already know and notify the provider. If money has been paid or bank details have been shared, contact the bank and the service promptly. ^[3]
Evidence and reporting. Save the messages and proof of payment if it is safe to do so, and report the incident to the service or through the platform. If there are threats or sexual demands, involve the police or specialist youth support services.
Talk without blame. Ask what made the message seem credible and which rule or setting would have helped afterwards. Adjust only what happens next so that your child can learn from the mistake without becoming afraid of the next message they receive.

Sources

[1]Bundespsychotherapeutenkammer (2020): Elternratgeber Internet
[2]klicksafe und Internet-ABC (2011): Internetkompetenz für Eltern: Kinder sicher im Netz begleiten
[3]Deutsches Kinderhilfswerk (2016): Der Internet-Guide für Eltern

Fake shops and phishing: How to protect your children from online fraud

Prepare rather than ban every message

How to spot a scam

The family rule in clear steps

If your child has already fallen for a scam

Sources

Further reading

Safely set up your child’s first smartphone: step by step

Online chats in games: Who is messaging my child, and how do I set it up?

My child's password: should parents know it?