Scam avoidance guidance?

[BagsyThisName]

My DM is widowed and had zero experience of managing money before my dad died. I look after her finances at the big picture level and she has got to grips with the day to day stuff ok. But she is naive, uses email and the internet etc.

I worry that she is vulnerable to scammers.
She nearly came unstuck with an 'hmrc' fishing email recently.

Is there any guidance anywhere that I can sit and go through with her?

seen this in our local age uk shop, and here it is online:

www.ageuk.org.uk/brandpartnerglobal/leedsvpp/information%20leaflets/ageukig05_avoiding_scams_inf.pdf

and here is the government on the same subject:
www.gov.uk/report-suspicious-emails-websites-phishing

show her how to 'hover' over an email address to reveal where it is really from. Remind her that no bank EVER asks for a full PIN, for her to transfer money or will ever send anyone to her door. No-one honest ever asks for passwords either.

if she gets a call from someone who suggests she calls back to confirm ID, ignore it and put phone down. If she does want to try it, she needs to put the phone down and call back 30 mins later.

or implement my rule; anything that is sold to you is something you either don't need or really don't want to get involved in.

Thanks, just what I was looking for