Suggest that they trust nobody. Ordinary folks don’t have the expertise to track down phishing emails, and most certainly, malicious links anywhere. Ask a techie? I offer that for family and friends.
As for voice fakes, these are wicked. Some have suggested using a secret codeword with relatives who might be faked for ransom demands etc.
I don’t even want to click on the “personalized” URL that my auto service provider sends, as that might encourage the salespeople. But they hide the tracking URL.
If it takes hovering over every URL for a hardened techie like me, pity the average person.
Thinking about a home proxy box to sanitize things. ISP’s won’t do it because they are in on the scams (IMO) and outside and AV services cost to do a nontrivial job.
Have been thinking about this for some time. Has to be dead-simple, bulletproof and zero-maintenance. Not much to ask?