ABA phishing skills can support pausing before opening an unexpected link or attachment, checking the sender and request, verifying through a trusted route, reporting the message, deleting it after evidence needs are addressed, and starting account recovery if information was shared. Use varied fictional examples. A polished logo, familiar name, urgent story, or correct personal detail does not prove authenticity.
Teach a short decision routine
Use pause, inspect, verify independently, report, and get help. Make it available through a device shortcut, AAC, wallet card, browser bookmark, or chosen supporter. Avoid requiring the person to identify every technical clue before seeking help.
Use current phishing guidance
FTC says phishing messages may try to obtain passwords, account numbers, or other sensitive information through links and attachments. Its guidance recommends contacting the person or organization through a known route rather than using the message's link or number.
Prepare the after-click route
Disconnect or stop further interaction when appropriate, contact the account or device owner, change credentials through the trusted service route, review MFA and account activity, preserve evidence, and report through the responsible platform, organization, security, financial, or law-enforcement channel.
Keep support accessible and blame-free
CISA's Secure Our World includes recognizing and reporting phishing among its four core actions. ASHA supports AAC access. Scams are designed to deceive; response speed and support matter more than blame.
A practical example
Harper reviews eight fictional messages. Trusted verification and report routes are ready for seven. Harper pauses and verifies 6/7, while one ambiguous case is handed to the account owner. The missing report control remains a system gap.
Questions families can use
Can the person pause immediately? Which link or attachment is unexpected? Where is the trusted contact? How is the message reported? What happens after a click or disclosure? Who owns recovery?
Sources
- Council of Autism Service Providers, ABA Practice Guidelines Version 3.0 public summary
- Behavior Analyst Certification Board, Ethics Code for Behavior Analysts
- American Speech-Language-Hearing Association, Augmentative and Alternative Communication
- Cybersecurity and Infrastructure Security Agency, Secure Our World
- Federal Trade Commission, How to Recognize and Avoid Phishing Scams
Finni resources
