How to stay safe online: An online safety guide

Vishing, phishing and smishing are three forms of cybercrime used by fraudsters to manipulate individuals and organisations. The aim is always the same: to get the victim to disclose personal information such as login details and credit card numbers.

What is this?

Phishing is a form of cybercrime in which fraudsters send messages via email or instant messaging. These messages often encourage you to click on malicious links, download files or enter your personal details on malicious websites. SMS phishing scams (Smishing) are spread via text messages rather than emails and Cybercriminals can even insert smishing messages into existing conversations.

The aim of phishing is to trick you into revealing personal information such as credit card numbers, passwords and usernames for your online accounts. Phishing messages often appear to come from someone you trust, such as friends, your internet service provider or your bank.

How to prevent phishing?

Phishing can be very difficult to spot, both at home and abroad. Here’s how you can spot phishing and avoid falling victim to phishing attempts:

• Do not open unexpected messages, do not click on suspicious links and do not download files from unknown senders.
• Attackers want you to act quickly. Don’t jump to conclusions before you’ve double-checked where the message is actually coming from.
• If you receive an unexpected message from a friend or your boss, give them a call in person rather than replying to the message.
• If a message seems too good to be true, it could be a phishing scam. Be careful if the message promises free content, money or prizes.

What is this?

Vishing, short for voice phishing, is a form of fraud in which cybercriminals attempt to obtain your personal details over the phone. They aim to gain access to your private information, such as login details or credit card numbers, or to your online accounts.

Characteristics of vishing calls

Vishing calls have certain characteristics or follow a specific pattern. Follow these tips to spot vishing:

• The caller immediately asks for confidential information.
• There is silence at the other end of the line.
• The caller is urging you to act quickly.
• The caller pretends to be an authority figure without identifying themselves.

How to prevent vishing?

If you suspect you’re receiving a vishing call, hang up immediately. You can also remain silent or ask the caller questions to find out more about the scam. Do not call back if the caller hangs up, as the call could be expensive.

A good way to check is to Google the number or use an app that can identify known callers. Always check the number if you don’t recognise the caller. Many vishing scams originate from abroad.

The best protection is to stay vigilant, follow the prevention tips and report vishing calls. Recovering lost accounts and data can be costly and time-consuming. So be proactive when it comes to your online identity and data. That’s the best way to protect yourself.

Like most internet users, you probably go online to look for information or read the news about what’s happening in the world. In most cases, the internet is a great source for learning and for reliable information. Unfortunately, however, there is also information that can be misleading,  whether intentionally or unintentionally. So, how can you tell what’s trustworthy online?

How to spot fake news?

Fake news has been around for a long time, even before the internet, but social media has made it more widespread and easier to share.

To make sure you aren’t misled by fake news, you can do the following:

• Check the source. Does the news come from a reliable publication, or does the source have a strong political agenda?
• Don’t just read the headline. An enticing headline can tempt people to click (‘clickbait’, anyone?), even if the article itself is far less exciting. Make sure you read the whole article, especially if you want to share it on social media.
• Find other sources. If no other publications are reporting on the news, it might be made up. You can also check the article by seeing if it cites reliable sources.
• Check when the article was published. Outdated information can sometimes mislead the reader.

What is spam?

Spam refers to all irrelevant and unsolicited messages sent online in large quantities. Spam is often spread via email, which you may also know as junk mail. However, there is more to spam than just email, as you may also come across it on social media, instant messaging apps and in the comments sections of websites.

Types of spam

Today’s online criminals are skilled at deceiving people, and spam messages can be very difficult to spot. Typically, the sender claims to be an authority figure, such as a representative of a well-known brand.

Here are some common examples of spam:

• Malspam is a portmanteau of ‘malicious’ and ‘spam’. It is a type of spam that floods your inbox with messages containing attachments infected with malware.
• Offers and adverts shared via social media or direct messages. If you click on a spam advert, you could end up on a malicious website.
• Fraudulent purchases on scam websites. Cybercriminals may sometimes sell products that don’t actually exist, or trick you into signing up for a fake subscription

How to spot spam?

Falling for an online scam can have serious consequences. Luckily, you can spot and stop spam messages with just a few tips:

• Examine messages critically and look for telltale signs of spam. Look for spelling mistakes, unbelievable claims, and urgent offers.
• Use reliable antivirus software. Even though antivirus programs can protect you from downloading malware to your device, you can still be fooled in other ways.
• Use a VPN for private browsing and always check what's in the URL when you visit a new website.
• Filter spam in your emails and remove or block spam messages when you receive them. Your email is smart and can learn to detect spam better if you help with filtering.

1. Keep your devices and software up to date - Outdated software can expose you to hackers and malware. Install updates as soon as they’re available, or turn on automatic updates so it happens in the background.

2. Watch out for malware and scammers - Even with updates, you can still be targeted. Be careful with email attachments and links, especially from unknown senders, as phishing is a common way to steal data or install malware.

3. Use strong passwords to protect your accounts – Create long, complex passwords, avoid using the same one in multiple places, enable two factor authentication where possible, and use a password generator or password manager.

4. Use two-factor authentication - Add an extra layer of protection by using a one time code, PIN or biometric check in addition to your password. This makes it much harder for criminals to access your accounts, even if they know your password.

5. Review & update privacy settings - Regularly check the privacy settings on your accounts to control how much data you share and what others can see. Setting reminders can help you keep these settings up to date