Every “forgot my password” link goes to your email. Protect it first, and turn on multi-factor sign-in.
Scammers can copy a voice from a few seconds of audio. Agree on a code word with your family and staff. Use it before anyone sends money or shares a password by phone.
3. The top Google result can be a fake ad.
Criminals pay for ads that look like your bank or software vendor. Use your bookmarks, or type the address yourself.
4. Call before you change bank details.
A common fraud is an email from a “vendor” with new payment details. Call the vendor on a number you already have before you pay.
5. Look at that QR code twice.
Criminals stick fake QR codes over real ones on parking signs, menus, and flyers. If the sticker looks new, do not scan it.
6. Lock your phone number.
Criminals can trick a carrier into moving your number to their SIM card. Then they get your text codes. Ask your carrier to add a PIN to your account.
7. Long beats complex.
A phrase of four random words is stronger than “P@ssw0rd!” and easier to remember. A password manager makes this simple.
8. “Remind me tomorrow” is a risky button.
Most attacks use flaws that already have a fix. Install the update today.
9. A backup you never tested is a guess.
Once a quarter, restore one file from your backup. Learn that it fails now, not during an emergency.
10. Clicking is not the mistake. Hiding it is.
Everyone clicks the wrong link at some point. The damage grows in the hours after. Tell someone right away, and make sure your staff feel safe to do the same.
