oversharing

Dear Gary, Specifically

Lurena builds a scam just for Gary, using everything he posted online: his school, his room number and his goldfish. Told from the villain's side, it shows how oversharing makes scams feel personal, and how to stop leaving clues.

Coming soon

This episode is on its way to YouTube.

Subscribe to @phishmael

Today's rule: Think before you post.

What kids learn

Your posts are clues
Knowing you doesn't make it real
Keep school, address and birthday private

Quiz time

Can you get them all?

Which is safest to share in a public post?

A message knows your name, your school and your pet. That means...

Play the game

📍 Post It Later

Is this post safe to share, or is it a clue on a treasure map?

For parents & teachers

Talk about it together

Look through your child's public posts together: what could a stranger learn?
Set accounts to private and talk about who 'friends' really are.
Keep school names, uniforms, routes, addresses and birthdays out of public posts.
Remind them: a message that knows about you can still be a scam.

What Scammers Learn From Your Child's Posts

Most scam messages go to thousands of people at once. Some are written for one person, using details found online. That's called spear phishing, and it works because it feels personal.

Read the full guide →