You use the same tactics as scammers to bait people in, but instead of scamming them after baiting them, you tell them about how they almost got scammed (and how to stay protected in the future).

From a strategy perspective, this seems easy to execute since you just need to copy what scammers are currently doing. This seems like it would be much more effective than current scam alert systems in making people realize what’s going on and making them more cautious. Experiential learning. It also only tries to tell people who are vulnerable about scams etc, and doesn’t waste everyone’s time.

Example: phishing email, when you click on that email, you’re taken to a shady domained page with alert saying “Stupid, you almost got hacked. Don’t ever click on random emails like that”