Malware & Threats
What Is Ransomware? A Simple Guide for Seniors to Stay Protected
Here is the most important thing you need to know about ransomware: if you back up your files regularly, ransomware cannot hurt you. Even if it hits your computer, you simply wipe it clean and restore from your backup.
That one habit — keeping a backup — is more powerful than any expensive software you could buy.
Now let's break down exactly what ransomware is, how it gets onto computers, and the five steps that keep you safe.
What Is Ransomware?
Ransomware is a type of malicious software that locks all the files on your computer. Your photos, tax documents, emails — everything gets locked behind a digital padlock that only the criminal holds the key to.
Once your files are locked, a message appears on your screen. It says you have to pay money — usually hundreds or even thousands of dollars — to get your files back. Criminals often demand payment in gift cards or cryptocurrency because those are hard to trace.
The name comes from the word "ransom," like in a kidnapping. Except instead of a person, your files are being held hostage.
One important thing to understand: you do not accidentally create ransomware. It is always placed there by a criminal, almost always through a trick. Which brings us to why older adults are such frequent targets.
Why Seniors Are a Prime Target
Criminals who write ransomware deliberately go after people in their 50s, 60s, and 70s. Here's why:
More valuable files. Seniors often have decades of family photos, scanned documents, and irreplaceable records on their computers. Criminals know this makes the threat feel personal and urgent.
Less familiarity with digital threats. If you didn't grow up with computers, these attacks can feel overwhelming and confusing — exactly what the criminals count on to make you panic and pay.
More likely to pay. Research consistently shows that older adults are more likely to pay a ransom than younger users, simply because they feel they have no other option.
The FBI estimates ransomware attacks cost Americans billions of dollars every year. And seniors lose more money per attack than any other age group.
How Ransomware Gets Onto Your Computer
Ransomware doesn't appear out of thin air. It almost always arrives through one of three paths:
A link in a suspicious email. This is the most common entry point. You receive an email that looks like it's from FedEx, your bank, or Medicare. The message creates urgency — "Your account has been suspended" or "Your package could not be delivered." You click the link and the ransomware downloads silently in the background.
An unexpected email attachment. Sometimes the email carries a file — a fake invoice, a supposed photo, or a document. The moment you open it, the ransomware runs.
Out-of-date software. Criminals actively look for known weaknesses in older versions of Windows, web browsers, and other programs. When your software is current, those gaps are patched. When it is outdated, they are wide open.
The good news: the vast majority of ransomware attacks are entirely preventable without any technical knowledge. You just need a few consistent habits.
5 Simple Steps That Protect You
Step 1: Back Up Your Files (This Is the Most Important One)
If ransomware locks your files but you have a backup from last week, the attack becomes an inconvenience rather than a disaster. You lose at most a week of data. You do not pay a penny.
The easiest approach is an external hard drive. Plug it in once a week, let it copy your files, then unplug it. A basic 1 TB external drive costs around $50 at any electronics store — cheap insurance for years of irreplaceable memories.
Cloud backup services are another option. They copy your files online automatically, every day. Windows users can use OneDrive; Mac users can use iCloud. Both offer free storage for a basic amount.
Critical detail: your backup must be disconnected from your computer most of the time. If a backup drive stays plugged in permanently, ransomware can lock those files too.
Step 2: Slow Down Before You Click
Before clicking any link or opening any attachment in an email, pause and ask three questions:
- Was I expecting this message?
- Does the sender's email address look exactly right? (Scammers use addresses like "support@fedex-notifications.net" instead of "@fedex.com")
- Is the message creating a sense of panic or urgency?
If anything feels off, do not click. Instead, open your browser and type the company's web address yourself. Go directly to the source rather than following a link someone else sent you.
Step 3: Keep Your Computer Updated
When Windows or your Mac notifies you that an update is ready, do not postpone it. Security updates are frequently patches for the exact vulnerabilities ransomware exploits.
To turn on automatic updates so you do not have to remember:
- Windows: Settings → Windows Update → toggle on "Automatic Updates"
- Mac: System Settings → General → Software Update → toggle on "Automatic Updates"
Once automatic updates are on, your computer handles this for you.
Step 4: Use a VPN on Public Wi-Fi
Coffee shops, hotel lobbies, airports — their public Wi-Fi networks are common hunting grounds for cybercriminals. When you connect to an unprotected public network, someone else on that network can potentially intercept your traffic, redirect you to fake websites, or push malware to your device.
A VPN (Virtual Private Network) creates an encrypted tunnel for your connection, so no one nearby can see what you're doing. Think of it as a privacy screen around everything you type and view.
NordVPN is one of the easiest VPNs to use for non-technical users. It is a single app on your phone or laptop — you tap "Connect" before you start browsing, and that's it. Your first month is free, so you can try it with no commitment before deciding.
Affiliate Disclosure: This article may contain affiliate links. If you make a purchase through these links, we may earn a small commission at no extra cost to you. We only recommend products we genuinely believe in. This helps support our work and allows us to continue providing free content.
What a Ransomware Attack Actually Looks Like
If ransomware hits your computer, here is the typical sequence:
- Your computer slows dramatically as the malware encrypts your files in the background.
- A full-screen message appears — often with a countdown timer — demanding payment.
- Your files display strange extensions you do not recognize, such as "vacation-photos.jpg.locked."
- Your desktop wallpaper may be replaced by the ransom note.
It is designed to look alarming. The countdown timer, the threatening language, the sense that you have hours to act — all of it is psychological pressure meant to make you pay before you think clearly or call anyone for help.
Should You Pay the Ransom?
No. The FBI, the Cybersecurity & Infrastructure Security Agency (CISA), and law enforcement agencies worldwide all advise against paying.
Here is why:
- Payment does not guarantee you will get your files back. Many victims pay and never receive a working decryption key.
- Paying funds further criminal activity and flags you as someone willing to pay, making you a target for future attacks.
- Some ransomware programs are so poorly written that files are corrupted beyond recovery even with the key.
If you have backups, paying is not even a question. You wipe the computer and restore your files.
If you do not have backups, contact a local IT professional or your computer manufacturer's support line before paying anything. Free decryption tools exist for many common ransomware strains, and a professional can check if one applies to your situation.
What to Do If It Happens
If you believe your computer has been infected:
Disconnect from the internet immediately. Unplug the ethernet cable or turn off Wi-Fi. This stops the ransomware from communicating back to the criminals' servers and may slow or halt the encryption process.
Do not turn the computer off yet. Some security tools work better when the device stays powered on.
Call someone for help. A trusted family member, a local computer repair shop, or your manufacturer's tech support line. Do not try to navigate this alone.
Report the attack. File a report at ic3.gov — the FBI's Internet Crime Complaint Center. It takes five minutes and helps law enforcement track these criminal networks.
Restore from your backup. Once a professional confirms the computer is clean, restore your files from the most recent backup.
The Bottom Line
Ransomware is frightening, but it is not random. The people who get hit are almost always missing one or two basic protections — an unpatched system, no backup, or a link clicked in a suspicious email.
Do these five things and you are better protected than most people online:
- Back up your files weekly to an external hard drive, then unplug it
- Pause before clicking any link or attachment in email
- Turn on automatic updates for Windows or your Mac
- Use a VPN like NordVPN whenever you connect to public Wi-Fi
- Consider all-in-one protection like Aura to monitor your accounts around the clock
You do not need to be a technology expert to stay safe. You need a handful of steady habits — and then you can stop worrying.
Last updated: 2026-06-19
Get free weekly safety tips from ClearShield — straight to your inbox.
Short, plain-language updates on the threats targeting people your age, and exactly what to do about them. No spam. No jargon. Unsubscribe any time.