Personal Digital Safety and Scam Response

Practical, patient assistance for older adults, families, caregivers, and community organizations facing suspicious messages, online impersonation, account-security concerns, and possible digital fraud.

Frederick Data Forensics helps clients slow the situation down, understand observable warning signs, preserve relevant information, and take informed next steps—without judgment or unnecessary technical language

Before founding Frederick Data Forensics, Christopher Floyd served the public as a firefighter and fire inspector with the District of Columbia Fire and Emergency Medical Services Department.

That experience established a lasting commitment to prevention, public education, careful documentation, and helping people make sound decisions during stressful situations. Fire protection is not limited to responding after an emergency occurs. It also involves recognizing hazards, clearly explaining risks, and helping people prevent avoidable harm.

Frederick Data Forensics applies that same service-oriented approach to digital safety. Whether someone is questioning a suspicious message, responding to a possible scam, attempting to protect an account, or seeking help after a digital incident, the objective is to provide calm, respectful, and practical assistance.

Technology changes, but the underlying commitment remains the same: help people recognize risks, protect what matters, and respond methodically when something goes wrong.

Review of a suspicious email, text message, website address, QR-code destination, pop-up, social-media message, or other digital communication.

The assessment may consider:

• Sender addresses and display-name mismatches
• Misleading links and redirect destinations
• Look-alike, Unicode, and Punycode domains
• Requests for passwords or verification codes
• Government, bank, retailer, utility, or family-member impersonation
• Requests for gift cards, cryptocurrency, wire transfers, or unusual payments
• False urgency, threats, secrecy, and other manipulation techniques
• Suspicious attachments or software-download instructions

What This Review Can Establish

A suspicious-message or link review is intended to help you understand what you received, identify warning signs, and decide what to do next. Depending on the information available, Frederick Data Forensics may review:

• The message’s wording, requests, telephone numbers and displayed sender information

• The submitted link and its actual domain name

• Look-alike characters, misspellings, Punycode and other domain-impersonation indicators

• Available email-header or message metadata

• Known phishing or threat-intelligence information, when an appropriate source is available

• Screenshots, receipts, account notifications or other records supplied by the customer

• The sequence of events, including whether a link was opened, information was entered, software was installed or money was transferred

You will receive a plain-language assessment of the indicators identified, the significance of those findings and recommended next steps. Depending on the circumstances, those steps may include preserving records, changing affected passwords, contacting a financial institution through a verified telephone number, checking an account through its official application, reporting the incident or arranging a separately authorized device examination.

Why the Result Is Not a Guarantee of Safety

A review can identify evidence consistent with impersonation, phishing, fraud or other suspicious activity. It cannot provide an absolute guarantee that a sender, website, link, transaction or account is safe.

That is because:

• Sender names, telephone numbers and email addresses can be spoofed.

• A legitimate account may have been compromised.

• A legitimate website may contain a compromised page or third-party content.

• Websites, redirects and threat-intelligence records can change after the review.

• Some malicious activity leaves little immediately visible evidence.

• A message may be part of a larger conversation or transaction not available for examination.

• A link that is not currently listed by a threat-intelligence source may still be new, unreported or harmful.

• A technically legitimate domain does not establish that the person communicating through it is honest or authorized.

Therefore, a result such as “no supported suspicious indicators identified” means only that the specific review did not identify those indicators in the information available at that time. It does not mean that FDF has certified the communication or transaction as safe.

What Happens If We Identify a Concern

If the available information indicates a credible concern, Frederick Data Forensics will explain:

• What was identified

• Why it may matter

• What should be preserved

• What immediate protective actions are appropriate

• Whether the bank, payment provider, online platform, law-enforcement agency or another specialist should be contacted

• Whether a separate, authorized examination of the affected device or available records may help determine what occurred

FDF does not remotely access customer devices as part of this initial review. Any device examination, evidence preservation, remediation or additional investigative work requires separate authorization and an agreed scope of service.

For the short disclaimer immediately beside the submission button, use:

Important: This review identifies supported warning signs and helps determine appropriate next steps. It does not guarantee that a sender, website, link, transaction or account is safe. A finding of “no supported indicators identified” means only that the submitted information did not reveal those indicators at the time of review.

A short consultation for someone who has received a concerning communication but has not yet sent money, installed software, or disclosed sensitive information.

The purpose is to pause the interaction, evaluate the available information, identify common manipulation techniques, and help the client locate an independent and trustworthy way to contact the person or organization being impersonated.

Frederick Data Forensics does not authorize transactions, provide investment advice, negotiate with suspected scammers, or guarantee that a communication is legitimate.

A preventive review of personal account and device-security practices. Depending on the client’s needs and authorization, the review may address:

• Multifactor authentication
• Password-manager use and password reuse
• Account-recovery information
• Recognized devices and active account sessions
• Email-forwarding and delegation settings
• Browser extensions and downloaded software
• Operating-system, application, and browser updates
• Remote-access applications
• Social-media privacy settings
• Mobile-carrier security and account PINs
• Financial-account alerts
• Trusted-contact and family-verification planning

Clients enter and retain control of their own passwords, authentication codes, recovery codes, and financial information. Frederick Data Forensics does not request or retain those credentials.

Technical assistance following a suspected scam, account compromise, malicious download, or unauthorized remote-access session.

With the client’s authorization, assistance may include:

• Documenting what occurred and constructing an incident chronology
• Preserving relevant emails, messages, telephone numbers, receipts, and payment instructions
• Reviewing available system, browser, account, or security records
• Identifying suspicious software, processes, downloads, or account activity
• Assessing remote-access applications and persistence settings
• Removing confirmed unwanted software with the client’s approval
• Helping secure affected accounts from a known-clean device
• Organizing technical information for reporting
• Providing a plain-language summary of observations, actions, limitations, and recommended next steps

Where practical, relevant information is preserved before remediation changes are made. The resulting documentation distinguishes observed technical facts, information provided by the client, actions taken, and matters that could not be determined.

This service does not guarantee recovery of money, identify an unknown person, determine criminal responsibility, attribute activity to a particular threat actor, or replace a bank, attorney, law-enforcement agency, emergency-response provider, or identity-theft restoration service.

Tech-support and impersonation scams frequently attempt to persuade someone to install software that gives another person remote control of a computer.

With appropriate authorization, an assessment may include:

• Identifying installed remote-access applications
• Reviewing whether unattended access or persistence was enabled
• Reviewing recently installed applications and downloaded files
• Identifying unexpected local accounts or startup entries
• Reviewing available browser and operating-system records
• Preserving relevant information before remediation
• Disabling or removing confirmed unauthorized software with the client’s approval
• Documenting the actions performed and any remaining limitations

No software is removed and no account setting is changed without authorization. Some remediation actions can alter or destroy potential evidence, so preservation needs are considered before changes are made.

We do not remotely access customer devices. Frederick Data Forensics will not ask you to install remote-access software, share your screen, provide remote-control access, or give us passwords, verification codes, or account credentials. Remote-access scam assessments are based only on information and materials that you voluntarily provide through an authorized process.

A guided planning session for an older adult and authorized family members or caregivers.

The plan may establish:

• One or more trusted contacts
• A private family verification phrase
• Procedures for independently confirming emergency requests
• A rule against secret or immediate financial transfers
• Agreed boundaries for family technical assistance
• Important institutional contact information
• Steps to follow after a suspicious communication
• A printed incident-response checklist
• A plan for account recovery or temporary incapacity

The older adult remains in control of personal devices and accounts unless another person possesses valid legal authority. Participation by a family member or caregiver requires the client’s consent or appropriate documentation of authority.

Frederick Data Forensics offers practical, nontechnical digital-safety presentations for senior-living communities, senior centers, libraries, faith communities, caregiver groups, homeowners’ associations, and other local organizations. 

This presentation explains how scammers use urgency, fear, secrecy, authority, and familiarity to influence decisions. Attendees learn how to recognize common warning signs, independently verify unexpected requests, protect account credentials, and respond when something may have gone wrong.

Topics may include:

• Government, bank, utility, retailer, and business impersonation
• Family-emergency and grandchild scams
• Tech-support pop-ups and remote-access requests
• Password and verification-code theft
• Suspicious links, QR codes, and look-alike domains
• Romance and investment scams
• Gift-card, wire-transfer, and cryptocurrency demands
• Steps to take before sending money or sharing information
• Preserving relevant information after a suspected incident
• Reporting resources and appropriate next steps
• Family and caregiver digital-safety planning

Sessions are presented patiently and without judgment. Presentations may include controlled demonstrations, large-print take-home material, and time for audience questions.

Available formats may include:

• 30-minute scam-awareness briefing
• 45–60 minute community presentation
• 60–75 minute presentation with extended questions
• Family and caregiver session
• Staff-awareness session
• A customized program developed around the organization’s needs

The program provides general education rather than individual legal, financial, investment, or forensic advice. Personal messages, account details, and potential evidence should not be displayed or discussed publicly during a group presentation.

1. INITIAL REQUEST

Submit only general information through the consultation form. Do not include passwords, verification codes, recovery codes, financial-account numbers, government identification numbers, encryption keys, private medical information, or confidential evidence.

2. PRELIMINARY CONSULTATION

We discuss what happened, whether the matter falls within the current service scope, what immediate actions may be appropriate, and whether authorization or additional documentation will be required.

3. AUTHORIZATION AND AGREED SCOPE

No personal device, account, or private information is examined until the client’s identity, authority, requested work, limitations, fees, and handling instructions have been documented.

4. ASSESSMENT, PRESERVATION, OR TRIAGE

Work is performed within the agreed scope. When appropriate and practical, relevant information is preserved before changes are made. Remediation actions require the client’s approval.

5. FINDINGS AND NEXT STEPS

The client receives a plain-language explanation of observations, actions taken, limitations, and recommended next steps. Appropriate reporting or referral information may be provided when applicable.

Frederick Data Forensics accepts work only from the device or account owner or from a person with documented legal authority.

Family members and caregivers may participate with the client’s permission, but concern for another adult does not automatically authorize access to that person’s accounts, devices, messages, or private information.

Do not submit passwords, one-time verification codes, recovery codes, financial-account numbers, Social Security numbers, government identification numbers, medical information, encryption keys, or confidential evidence through the website form.

Customer information accepted for technical work is handled according to the agreed scope and stored using access controls and encrypted business storage where applicable. Active customer case data is ordinarily retained for seven calendar days after the final deliverables are made available to the customer. After that period, customer content is removed from active storage. An encrypted protected snapshot may retain an earlier copy for up to seven additional days before expiration. A different period may apply when authorized by the customer or required by the service agreement, an active dispute, legal process, reporting obligation, litigation hold, insurance requirement, or applicable law. See our Privacy, Storage, and Data Integrity page for details about retention, deletion, and administrative records. 

Services are provided respectfully and without blame. Modern fraud operations are intentionally designed to manipulate attention, emotion, trust, and decision-making. Promptly reporting what happened may help preserve information and improve the options available.

Frederick Data Forensics provides technical assessment, preservation, authorized remediation, documentation, education, and reporting-resource guidance.

Frederick Data Forensics does not:

• Request or retain client passwords or verification codes
• Accept custody or control of client funds
• Initiate or authorize financial transactions
• Provide legal, medical, financial, or investment advice
• Guarantee the recovery of money, accounts, or data
• Certify that a communication, website, or transaction is safe
• Negotiate with suspected scammers
• Conduct private-investigator activities
• Determine a person’s identity, intent, criminal responsibility, or legal liability
• Replace financial institutions, attorneys, law-enforcement agencies, emergency services, or government reporting agencies

If submitted or examined material creates a legal reporting or preservation obligation, its handling will be governed by applicable law and the service agreement.

That is perfectly acceptable. Describe the situation in general terms, and Frederick Data Forensics will determine whether it falls within the current service scope.

Do not send sensitive evidence or credentials through the initial form.

Serving individuals, families, and organizations in Frederick, Maryland, and surrounding communities.