FamilyAtlasStop interacting with the suspicious page and ask what happened without blame. Clicking alone, entering a password, sharing a verification code, paying and installing something are different situations. Do not immediately wipe the device or change every account just because a page opened. If credentials or money were shared, act promptly through trusted account and payment-provider routes, not the link or phone number in the message.
If software was installed or the device may be compromised, use a known-clean device for recovery and get appropriate technical help. The FTC recommends cleaning up malware before resetting accounts on an affected device. Secure the affected account, sign out other sessions and review recovery details; reused passwords create additional accounts to protect. The first 30 minutes is a triage plan, not a promise that all recovery can be finished in that time.
FTC: How To Recognize and Avoid Phishing Scams · FTC: How To Recover Your Hacked Email or Social Media Account
The parent concern
A child who expects punishment may omit the most important detail: a code, payment or installation. Calm questions improve the information available for the response.
A first-response triage map
| What happened | First useful action | What not to assume |
|---|---|---|
| Only opened a page | Close it; check for any further action or unexpected download. | A scare message proves infection. |
| Entered a password or code | Recover via the official service on a trusted device; sign out other sessions. | Closing the page cancels the disclosure. |
| Installed or approved something | Stop using it; get trusted cleanup or administrator help. | A password reset removes installed software. |
| Paid or gave card details | Contact the payment provider promptly and report. | An account reset recalls a payment. |
Start with the action, not the scare screen
Close the suspicious page and avoid its contact details. Verify any real organization through a route you already trust. Ask what was entered, approved, installed or paid. A page’s claim that the device is infected is not proof; do not follow its cleanup instructions.
Recover from a trusted device
If malware may be present, the FTC advises updating security software and removing it before recovering accounts on that device. Use a known-clean device for urgent account actions. Recover the affected account through its official service, sign out other sessions, turn on two-factor authentication and check recovery details and forwarding rules.
FTC: How To Recover Your Hacked Email or Social Media Account
Triage payment and reused passwords separately
Contact the issuer or payment provider immediately if card details or money were involved. State exactly what happened and follow its incident process. If a shared password was reused elsewhere, protect those affected accounts too, starting with the email account that can recover others.
If an app, browser extension or configuration profile was installed, keep it from further use and seek trusted technical support, especially on a school-managed device. Do not assume a password reset removes an installed compromise.
Use Roblox’s official recovery route for a game-account scam
Report, then fix the route back in
Report the suspicious message through the provider and the relevant fraud authority. The FTC’s recovery advice includes notifying contacts if an attacker used the account to message them.
After urgent steps, practice spotting requests for passwords and codes. Record what changed and check that the child can still access legitimate school and recovery tools.
FTC: How To Recognize and Avoid Phishing Scams · FTC: How To Recover Your Hacked Email or Social Media Account
What you can do right now
- Close the page and stop responding.
- Ask whether anything was entered, approved, installed or paid.
- Use official recovery from a trusted device.
- Contact the payment provider if relevant.
- Revoke other sessions and check recovery details.
- Arrange device cleanup if installation or malware is suspected.
A way to start the conversation
“Thank you for telling me quickly. First tell me what you clicked and what you entered or installed. We can deal with the safety problem before talking about the rule.”
A suggested script to adapt, not a clinical intervention.
What technology cannot solve
Changing a password does not remove malware or recall a payment. A browser warning alone does not establish infection. School-managed devices need the administrator’s incident process.
Questions parents ask
Is clicking alone the same as losing an account?
No. Find out whether credentials, codes, approvals, payment or installation were involved; a click alone does not establish takeover.
Should I reset passwords on a possibly infected device?
Use a known-clean device for urgent recovery. FTC guidance calls for malware cleanup before account recovery on the affected device.
Does a factory reset recover money?
No. Contact the payment provider promptly; device cleanup and financial recovery are different tasks.
Sources and review
Provider documentation explains settings and eligibility. Professional guidance provides context, while our suggested family strategies are labeled separately. FamilyAtlas claims were checked against implementation, with release limits stated above.
- FTC — How To Recognize and Avoid Phishing Scams safety · checked 2026-09-30
- FTC — How To Recover Your Hacked Email or Social Media Account safety · checked 2026-09-30
Next source review: 2026-12-30. Menus, eligibility and rollouts can change; follow the linked provider instructions if your screen differs.
Written by FamilyAtlas; product descriptions are not independent product recommendations. No claim of medical or psychological review is made.