Twelve practical actions to reduce everyday risks from compromised accounts, scams, invasive permissions and AI impersonation.
◈ Interactive tools run in this browser only. Nothing is sent to a server.Review precise and background location access, account devices, shared calendars, photo location tags and family sharing. Disable unnecessary permissions. If coercive monitoring is suspected, use a safer device before changing settings.
Agree on trusted callbacks for urgent requests, discuss scams without blame and avoid public school schedules or live locations. Review age-appropriate privacy controls together.
Never share recovery phrases or private keys. Verify full website and contract identifiers independently. Reject unsolicited support DMs, guaranteed returns and recovery-fee schemes. Read transaction permissions before signing.
A familiar face or voice is not proof. Pause urgent demands and call a known number through an independent channel. Preserve safe copies of relevant messages and report impersonation to the platform.
Secure primary email and account recovery first. Use your jurisdiction’s official identity-theft recovery service and follow its steps. In the U.S., IdentityTheft.gov provides a recovery pathway.
Prioritize personal safety. Changing or removing suspected stalkerware can alert an abuser; use a safer device and seek qualified local help to plan next steps. Keep evidence securely; never post location histories or investigate a suspected person yourself.
Update routers, cameras, smart-home and vehicle apps. Replace default passwords and review shared accounts, remote access and paired users. Do not tamper with unknown devices; seek trusted help if safety is at risk.
Use unique long passwords with a reputable password manager. Enable phishing-resistant MFA where available; keep recovery codes securely offline and never approve unexpected login prompts.
Review public people-search listings and available opt-out routes. Share only required information with verified providers. Removal can be incomplete and information may reappear; revisit periodically.
Use the relevant platform’s official report channel, local consumer-protection or data-protection authority, and appropriate law enforcement for threats or crimes. The Pact does not accept incident reports or sensitive evidence. U.S. scam reporting: ReportFraud.ftc.gov. Outside the U.S., use the equivalent local authority.
Educational guidance reduces some risks; completing this checklist is not a security audit or a guarantee of safety.