If you ask friends and whānau, you’ll find that getting scammed might be more common than you think.
In fact, according to BNZ nine out of ten New Zealanders were targeted by a scam in the last year.
Scammers are coming up with new tactics to separate people from their money, but that doesn’t mean there aren’t ways to fight back.
Matthew Evetts, Datacom’s cybersecurity director, stressed that “cybersecurity should be something that everyone cares about both at work and at home".
It doesn’t have to be complicated or daunting - even if you aren’t the most tech savvy, there are a few simple things that you can do to keep your information safe.
Passwords
It can’t be stated often enough that the passwords you use are important.
CERT NZ said to keep passwords long, and avoid any personal details like birthdays, addresses, or the names of family members. These are easy to guess.
Avoid common passwords such ‘password123’ or ‘qwerty'.
Evetts said under no circumstances should you reveal a password to anyone for any reason.
“If any service asks for your password outside of signing-in to their service - then don’t go any further.”
If you do accidentally share your password with the wrong person, one of the most important things you can do to minimise the impact is to make sure that you use a different password for every account you have.
That way, if you let one password slip it doesn’t compromise all of your accounts.
Password managers
It may seem like too much work, but there is a really easy way to keep all those different passwords accessible.
A password manager is a tool that can not only store your passwords securely but can create strong passwords for you and fill them in when they are needed.
Evetts said “everyone, without exception, should be using some kind of password manager”.
Password manager apps are available for your phone, computer, and even in your browser.
You do need to remember a password to access the password manager, but a passphrase can be useful for this.
That’s when you use a collection of words, either random or in a sentence. They can be much easier to remember than numbers and letters, but are still secure.
The same rule about keeping personal information out of any password still applies to passphrases.
Authentication
2-factor authentication (2FA) or multi-factor authentication (MFA) is a great extra step that goes beyond a password.
2FA or MFA mean that you need more than one thing (your password) to verify your identity.
Depending on what service you use that extra step could be a text or call to your phone, biometric verification like a face or fingerprint scan, or a hardware authentication device.
Evetts suggested an app on your phone as a great option for this, which you can have available everywhere you go.
Social engineering
Even if you have great password practices and use MFA, it’s important to still think carefully about your online interactions.
Evetts said social engineering is one of the most common traps, regardless of what platform or device you are using.
Social engineering is a technique used by scammers whereby they manipulate you into giving things away.
No matter how good your security precautions are, or how legitimate a person may seem, Evetts said you should be wary of any unsolicited contact.
“Don’t trust anything on face-value, just like you wouldn’t trust a stranger on the street.”
Even if the person you’re talking to doesn’t seem suspicious right away, Evetts said, “don’t be afraid to test a person or service’s legitimacy".
If you’re talking to a business you can hang up and call back on the number listed online.
If you’re talking to someone who claims to be a friend or family member you can ask a question that only they would know the answer to.
If the person on the other end of the line is offended, just let them know you’re being cautious about security.
Check bank accounts
Keeping a close eye on your bank account isn’t just good for your personal finances, it can make all the difference if you’re targeted by a scammer.
Some scammers will test potential victims by taking a small account of money before withdrawing more.
If you are keeping watch and ready to go to your bank immediately, you may be able to catch suspicious transactions before you lose too much.
When Fair Go spoke to scam investigator Bronwyn Groot earlier this year, she stressed that contacting your bank as soon as possible is crucial.
With enough time they may be able to freeze the funds before it’s too late.
Check credit score
Regularly checking your credit score is a good idea too.
Any loans applied for in your name will be listed, giving you some warning that your personal information has been compromised.
Remember, even if you’re careful a lot of your information is already out there.
Evetts suggested that you assume some of your “most important information has already been stolen” and protecting against the fallout from that.
He said to start with old passwords – ones that you used a few years ago – Evetts said you can assume they have been compromised.
If you want to know how much information linked to your email address has been included in data breaches, you can check: https://haveibeenpwned.com/
It will tell you what information has been compromised and where. You should immediately change passwords for anything listed, and any other websites that share the same password.
Cyber safety is for everyone
Evetts stressed that cybersecurity isn’t just something for people who know their way around a computer – “everyone needs to know how to stay safe".
Following a few simple practices online, asking a few tough questions, and keeping a close eye on your bank account can make a world of difference.
SHARE ME