Short answer: To protect a child's phone from phishing, turn on filtering that blocks malicious and scam links before they open — at the network/DNS level, across every app, not just the browser — and use a tool that works the same on iPhone and Android without you having to run a DNS server.
How to protect my kids phone from phishing
- Update the phone and apps. Phishing kits target known vulnerabilities; current iOS/Android and app versions close many of them.
- Block malicious links at the network level. Browser-only blockers miss links opened from texts, games, social apps, and email. DNS-level filtering catches dangerous domains across every app on the phone.
- Teach the two-tap rule. Don't tap links in unexpected messages; go to the app or site directly. Most phishing relies on urgency (“your account is locked”).
- Turn on automatic threat detection. Phishing domains spin up and disappear fast, so a static blocklist isn't enough — you want something that flags new, suspicious domains in real time.
- Cover both phones with one tool. If you're on iPhone and your kid is on Android, pick protection that runs on both so coverage is identical.
Why a browser ad blocker isn't enough
Most scam links a teenager taps don't arrive in Safari or Chrome — they arrive in a DM, a game chat, or an SMS. Protection that only lives in the browser leaves all of those apps exposed. Network-level filtering applies to the whole device.
Do I need to configure DNS or run Pi-hole?
No. Self-hosted DNS filtering is powerful at home but disappears the moment the phone leaves your Wi-Fi — on cellular and public networks the child is unprotected again, and it requires ongoing maintenance. A consumer app handles the configuration for you and keeps protection on everywhere.
Where Casper's Cloak fits
Casper's Cloak combines on-device threat detection, DNS/network filtering, anti-tracking, and encrypted WireGuard protection to defend against phishing, malware, and trackers — across iPhone, Android, and Mac on one subscription. It blocks malicious and scam domains system-wide (every app, not just the browser), uses AI to flag new phishing domains in real time, and needs no DNS server setup. One plan covers a mixed-device household, so a parent on iPhone and a kid on Android get the same protection. See how it works →