Welcome,
Cyber Defender.
This isn't your average boring safety lecture. Four quick missions, real scam DMs to hunt, a live popup slayer, a password forge, hidden achievements, and a printable Cyber Defender certificate at the end.
It all runs right here in your browser. Nothing you type ever leaves this page. Promise. 🔒
13 seconds to lose your account.
A true-to-life story. It happens thousands of times a day.
You're gaming and a DM slides in from a random account: "🎁 FREE 10,000 Robux — verify your login here: roblox-freerewards.com". You tap it. The page looks exactly like the real Roblox login — same logo, same colors. You type your username and password and hit enter.
That fake page wasn't broken — it harvested your password the instant you typed it. Within seconds the attacker logged into your real account, changed the email so you're locked out, and started DMing your friends the same scam. The whole takeover: about 13 seconds. What would have saved you? Reading the URL, and having 2FA turned on.
The URL is the truth
Real Roblox is roblox.com — not roblox-rewards.xyz. Real Discord is discord.com. Read the actual domain, not the words in the link.
"Free / you won" = bait
Free Nitro, free V-Bucks, free Robux, "you've been selected," "verify or it'll be deleted." If a stranger is handing out prizes, the prize is you.
Urgency + secrecy = scam
"CLAIM IN 10 MINUTES." "Don't tell anyone." That combo exists to rush you before you think, and stop anyone from talking you out of it.
🛡️ Two rules that beat almost every account scam: (1) Never type your password on a page you reached from a DM or link — open the app yourself instead. (2) Turn on 2FA so a stolen password isn't enough to get in.
🎮 Mini-game: hunt the red flags
Tap every sketchy thing in this DM. Find all 6 to earn the Phish Spotter badge. No misclicks = bonus badge.
If someone pressures you for photos — or threatens you with them — read this.
Sextortion is when someone tricks or pressures you into sending a private or nude photo (or fakes one using AI), then threatens to share it with your friends or family unless you send money, gift cards, or more photos. They often pretend to be a teen your age. It's one of the fastest-growing crimes against teens — and it works by making you feel panicked, ashamed, and alone.
If this happens to you, it is NOT your fault — and you are not in trouble. The person threatening you is the criminal, not you.
Take a breath. The panic is exactly what they're counting on. Here's the play. You've got this, and you don't have to do it alone.
- 🔒 Keep your accounts private.
- 🚫 Don't accept random followers or friend requests.
- ⚡ A stranger who moves fast to flirt or pushes to DM off-platform is a red flag.
- 📸 Never send a photo you wouldn't want screenshotted.
- 👀 A "cute stranger" who wants to jump to Snap/Insta/Discord and get intimate fast — that's the pattern.
If it's happening right now — the play:
🤖 About deepfakes
Scammers also fake nude images using AI. A fake photo is still sextortion, the advice is exactly the same, and a fake can't actually be traced back to something you did — because you didn't do it.
You'll get through this
It can feel like the end of the world in the moment. It isn't. This gets handled all the time, it passes, and telling one trusted adult is the bravest, smartest move there is. You're not alone.
Free stuff that costs everything.
Some scams don't ask for your password — they just scare you or tempt you into clicking, downloading, or paying. First, meet the fake-alert popup. It's loud and terrifying and 100% harmless — until you call or click. Try the safe simulator below (it runs locally and ends with a big "FAKE" reveal).
🎭 What the fake alerts look like
- 🚨 Full-screen page that won't close normally
- 🔊 Alarm sound or a robotic "your device is infected" voice
- 📞 A number to "call support" — or a "verify now" button
- ⏱ A countdown timer to make you panic
- 📋 Logos that look almost right, but slightly off
✅ How to beat it
- 🛑 Don't call. Don't click. Don't pay. Ever.
- ⌨️ Close the tab (Ctrl/Cmd + W). If it's stuck, force-close the browser.
- 🔌 Worst case, restart the device. The "virus" was never real.
- 🗣️ Tell a parent or trusted adult — not the number on the scary page.
🧪 Safe simulator: slay a popup
Two flavors, both 100% safe and local. Try both to see the same trick in different costumes.
Each ends with an obvious "I'm a fake!" reveal.
🪝 Other "too good to be true" traps
Cheats & "generators"
Free game hacks, aimbots, mod menus, "free Nitro/Robux generators" — that download is the malware. It steals your accounts.
Money & crypto flips
"Send me $50, I'll flip it into $500." "Crypto flip, guaranteed." Always a scam. Once it's sent, it's gone — and they'll ask for more.
Fake jobs & scholarships
"You're hired!" or "You won a scholarship!" — but first pay a fee or hand over your bank login. Real ones never work like that.
Marketplace / Zelle
"I'll send extra — just refund me the difference." That's the whole scam. The first payment is fake or reversed; your refund is real.
Lock it down.
"Delete" isn't a magic eraser — screenshots exist and the internet remembers. Stay in control of your own story, then lock your accounts with a strong passphrase and 2FA.
Screenshots are forever
Even "disappearing" snaps and deleted posts get screenshotted, saved, and reshared. Post like it could show up on a big screen someday.
Colleges & jobs see it
Colleges, coaches, scholarship committees, and future employers really do look. A joke that lands today can read very differently in a few years.
Kill the location
Turn off geotags. Don't post your school, your daily schedule, your address, or that you're home alone. Share where you were, not where you are.
🛡️ If you're getting bullied
- 😤 Don't retaliate. Clapping back just feeds it and can flip who looks like the bad guy.
- 📸 Screenshot it, then block and report in-app.
- 🗣️ Tell someone — a friend, a parent, a counselor. Reporting isn't weak; it's the strong move.
💪 Be an upstander
- 🙅 Don't pile on and don't laugh along — silence can look like a side.
- 📵 Don't forward the screenshot. Sharing it is part of the harm.
- 💬 Check on the person and report it — you can help even when it's not aimed at you.
🔑 Password forge
A great password is long, unique, and backed up by 2FA. Type in the forge and watch strength explode as it gets longer. Nothing is sent anywhere — go ahead and experiment.
The password rules
- 📏 Length beats symbols. A 4-word passphrase destroys P@ssw0rd1.
- ♻️ Never reuse the same password across games, socials, and email.
- 🔑 Use a password manager so you don't have to remember them all.
- 🛡️ Turn on 2FA everywhere — game accounts, socials, email. It's the #1 upgrade.
purple-otter-skateboard-lava
Four random words. Easy to remember. Basically un-crackable.
Never share it
Not with your bestie, not a bf/gf, not someone claiming to be "Roblox staff." Your password is yours alone.
Guard your 2FA code
Nobody legit ever asks for your 6-digit code — not even a friend. Reading it out loud = handing over your account.
Prompt flood?
A pile of "approve login?" prompts you didn't ask for = someone has your password. Deny all and change it.
—
—
🏅 Achievements
Hover to see how to earn the ones you missed.
🆘 Get help / report
Save these. The bravest, smartest move is always telling a trusted adult.
Bring Cyber Defender to your school or group
Parents, teachers, youth leaders — this free edition is the short version. Ennoveda runs the full in-person Cyber Defender workshop for schools and youth groups, with a live walkthrough, Q&A, and printed take-home cards. Reach out to bring it to your community.
Certificate of Completion
📤 Shareable score card
Right-click → "Save image as..." or use the buttons below.