Two paths: spotting traps, and being prepared for when something slips through anyway. Each station takes about ten minutes. Start wherever you like. Your progress stays only in this browser — nobody else sees it, not even us.
New since you last practised
- Screening out nuisance callers: the calls station now shows how you can screen out numbers that keep bothering you — on a FRITZ!Box, an iPhone or an Android phone — and where to report such calls. On a FRITZ!Box they go to the answering machine: your phone stays quiet, and anyone added by mistake can still leave a message.
- No magic: how does a computer actually work? The new house takes you floor by floor from the power in the basement to the AI under the roof — hands-on, with no test. Along the way, some traps lose their power to scare: a sender is only text, and a virus warning in the browser is only painted on the screen. The matching floor also appears at the end of the inbox and pop-ups stations. Only your browser remembers which floors you’ve finished.
- Current warnings: the box on the home page and the course page now says it plainly: you don't need to follow every warning. Scams change, the levers behind them don't — and those are what you practise here.
- More variety in refreshers: the refresher now also brings back pop-ups, phone calls and shopping — cases from exactly the stations that are due. The reminder only appears once you've done the whole course; until then, “Refresher due” sits quietly on the station.
- Current warnings and passing it on: the home page and the course page now have a box linking to sites that regularly warn about real scams — Which? and Report Fraud. At the end of every station you can pass the exercise on: tap the name for someone else, and on a phone the button opens the share menu. Nothing is stored. The page Asking AI for advice now links to a background article on lostcontext.ai.
Time for a quick refresher
Three mixed cases from stations you've already done. Takes just a few minutes — and keeps what you learned fresh.
Spotting traps
Pop-ups, texts, calls, addresses, emails and online shops: work through the tricks calmly.
Being prepared
What protects you if something does slip through: passwords, a second key, family agreements, devices — and an emergency drill.
Going further
Three extra exercises for anyone who wants more: hunt for the warning signs yourself, build a scam email once, and help someone else without making them feel foolish. They don't count towards the record.
Current warnings
You don’t need to follow every warning: scams change, the levers behind them don’t — and those are what you practise here.
These sites regularly report the scams going round right now — with real company names and examples:
- Which? scam news — the consumer organisation’s latest scam warnings
- Report Fraud news — warnings from the police’s fraud reporting service for England, Wales and Northern Ireland
Links checked 3 October 2026.
After the course
Refresh
What you practise once fades. The course suggests a refresher after a day, a week and a month — you can also start one any time.
Some browsers forget your progress after a while without a visit — Safari on iPhone and iPad after seven days. A calendar reminder still works.
Practice record
A page to print with the stations you've done on both paths. Not a certificate — a reminder, and a good reason to talk about it at home.
Class & family
Practising together works well — at the kitchen table or on a projector in a class.
Security glossary
A word you don't know? The key terms in plain language — with a tip and the way to the matching exercise.
On your home screen and on the go
If you come back for refreshers, you can put Practice makes safe on your home screen as an app. One tap on the icon opens it straight away, in its own window. The app doesn't come from an app store but from this site itself, and it shows the same pages as your browser.
If no button appears, use your browser's menu:
- Android (Chrome): tap More ⋮ to the right of the address bar, then “Install and create shortcut” and “Install”.
- iPhone (Safari): tap “Share”, then “Add to Home Screen”. Leave “Open as Web App” turned on and tap “Add”.
- Computer: a bookmark is enough (Ctrl + D, on a Mac ⌘ + D).
Only install what you opened yourself
This app only installs when you tap the button yourself, on a site you opened yourself. If a site urges you to install its “app” or to add it to your home screen — say after a text, a call or an advert — treat that as a warning sign. In 2024, criminals used exactly this to slip fake banking apps to customers of Czech banks. Only get your banking app from an official store such as Google Play or the Apple App Store.
Without a connection, too
If you like, your browser can keep every page of Practice makes safe on this device, the emergency plan included. They then open without a connection, for example where there's no signal. Only our public pages are stored, nothing about you. Whenever you visit with a connection, your browser fetches the latest version. Only the voices in the phone calls need a connection. If you've installed the app, save from within the app.
In the browser, some delete the copies after a while without a visit — Safari on iPhone and iPad after seven days. In the app on your home screen they stay. On iPhone the app may keep its own storage; your progress then starts afresh there.
For an emergency without a signal or battery, paper helps: the emergency card to print in “An emergency drill”.
Sources (checked 1 October 2026)
ESET, Be careful what you pwish for – Phishing in PWA applications (20 August 2024; fake banking apps spread by text, automated calls and social media adverts) · Stop! Think Fraud (UK Government), Use antivirus software (apps only from official stores) · Google, Use web apps · Apple, Turn a website into an app in Safari on iPhone · WebKit, WebKit Features in Safari 26.0 (15 September 2025; every icon opens as a web app) and Full Third-Party Cookie Blocking and More (24 March 2020; Safari deletes after seven days without a visit, home-screen apps don't).
Your progress
Stored only in this browser's own storage on this device. Deleting it resets all stations.
All companies, people, addresses and numbers in the exercises are invented. Any resemblance to real companies or people would be purely coincidental and unintended.