Wait, Are We Not Supposed to Click Links Anymore?

Is it just me, or is everyone suddenly talking about online security?

Don't click unknown links. Enable two-factor authentication. Beware of QR codes. Don't trust suspicious messages.

And then your phone lights up:

"Suspicious activity detected. Secure your account immediately."

Great. Now even the security warning looks suspicious.

With all these articles and videos circulating, you can't help wondering: Is something happening that I should be worried about? And am I doing enough to protect myself?

We can't exactly stop clicking links, shopping online, or using our favorite apps. Otherwise, you probably wouldn't be reading this article either!

So, what actually matters?

Scammers Have Learned to Sound Like the Good Guys

According to the Federal Trade Commission, Americans reported losing $3.5 billion to impersonation scams in 2025.

But the interesting part isn't just the number. It's how some of these scams work.

In September 2026, Microsoft Security Research documented attacks where scammers pretended to be IT support, telling employees they urgently needed to update their passkeys or authentication settings.

The supposed security update was actually part of the attack.

Read that again.

People were being tricked into compromising their accounts while believing they were making them safer.

This is why spotting scams isn't always as simple as looking for spelling mistakes or suspicious-looking websites anymore.

Sometimes the message looks professional, sounds responsible, and asks you to do something you've been repeatedly told is important.

Okay, So What Should We Actually Do?

The answer isn't to become suspicious of everything. It's to build a few reliable habits.

1. Treat unexpected requests differently from everyday activity.

A link in a newsletter you subscribed to isn't the same as an unexpected message demanding that you verify your bank account.

Be particularly cautious when a message asks for passwords, money, verification codes, or immediate security changes.

You don't need to follow its instructions. If the concern seems genuine, contact the organization separately using contact information you already trust.

2. Use 2FA, but don't approve requests blindly.

Two-factor authentication adds protection beyond your password. Passkeys are even better at resisting phishing when supported.

But here's something important: if a login code or approval request arrives when you're not signing in, don't share the code or approve the request.

A notification isn't proof that you need to do something.

3. Make your important accounts harder to compromise.

Start with your primary email account. It's often connected to password resets for other services.

Use a unique password, enable 2FA, and consider a password manager so you don't need to remember dozens of complicated passwords.

Do the same for banking and other important accounts.

4. Don't ignore software updates.

Those inconvenient update reminders aren't always about new features. Many updates address security vulnerabilities.

Turning on automatic updates is one of the easiest precautions you can take.

5. Be skeptical when someone creates urgency.

Whether it's a fake delivery problem, an unexpected payment request, or someone claiming to be technical support, be wary of anyone pressuring you to act immediately.

Especially if they want you to share information, install something, or grant access to your device.

You can always decline an unexpected request while you independently verify it.

So, Do We Need to Worry More?

I would say we need to be more aware, not more anxious.

We already know to lock our doors when leaving home. We don't spend the entire day worrying about whether someone might break in.

Digital security can become a similar habit.

Unique passwords. Strong authentication. Updated devices. A little extra caution with unexpected requests.

None of these requires us to give up the convenience of technology.

And that brings us back to the original question: Are we not supposed to click links anymore?

Of course we can.

The real difference is between a link we choose to open and an unexpected message pressuring us to act.

So keep clicking, shopping, sharing, and enjoying the internet. Just don't let a stranger's sense of urgency become yours.

Especially when that stranger claims they're trying to protect you.

Author's note: AI was used as a drafting and editing aid.