Cybercriminals are lurking around every internet corner waiting for you to make a wrong move.
Paul Tucker, chief information security officer at BOK Financial® offers five basic tips for keeping yourself safe online.
1. Create unique and strong usernames and passwords.
What makes usernames and passwords secure? Choose different ones for each of your online accounts. Avoid using any personal information in your username (like your birthday, address, Social Security number), and never reuse passwords for multiple sites.
"Cybercriminals take advantage of easy-to-crack or reused passwords," Tucker said. "If fraudsters obtain your password, they will try to gain access to other online accounts. I highly suggest regularly updating all of your passwords to keep them secure."
2. Enable multi-factor authentication when prompted.
To protect online users, sites and online accounts are enabling multi-factor authentication. This method grants users access to the account only after they satisfy two or more login factors, such as authentication via a phone call, text message, email or push notification.
"Even if cybercriminals obtain your password, they may be stopped by the protections of multi-factor authentication," Tucker said. "Yes, it is an additional step you have to take when logging into an account, but this extra level of protection could be the one thing that keeps an attacker out of your accounts."
3. Only visit familiar, secure sites.
Whether you're going to an online retailer offering big discounts or a nonprofit organization seeking donations, cybercriminals are watching. Fraudsters impersonating known and trusted organizations try to trick individuals into sharing personal information or clicking on malicious links or websites.
"Cybercriminals are using a variety of tactics," Tucker said. "Not only are they creating fake websites at an alarming rate and luring users to act, but they're also masking themselves as organizations aiding in recovery efforts and trying to steal your money."
4. Only visit familiar, valid websites, and be sure they are authentic.
Tip: Look for sites that begin with "https" or have a padlock icon in the address bar. If something seems off, it probably is. These few extra seconds will help you stay safe while shopping online. Think before you click.
In addition to creating fake sites, fraudsters are also replicating discounts or calls to action and luring customers with malicious links. Fake emails, called phishing, plus spoofed text messages and phone calls are just a few ways cybercriminals try to access your information or bait you to click and install malware on your device.
Phishing emails or suspicious messages typically:
- Evoke a sense of urgency or cause panic, such as declined payment, past due or cancellation notice or by saying "Click Now!" or "Must Act Now!".
- Entice users with rewards, gifts or incentives.
- Request your username and password for access.
- Contain mismatched URLs, email addresses or misspelled words.
- Include unexpected means of communication with files or links.
Don't let down your guard, Tucker cautioned. Some cybercriminals can use fake emails from someone you know, a technique called Business Email Compromise.
In this scam, fraudsters send emails from a compromised, yet known account, asking recipients to complete unusual tasks. Since the recipient knows the sender, these cybercriminals are relying on the recipient to act no matter what's being asked of them.
"Cybercriminals are banking on one wrong click," Tucker said. "If you're going through emails or text messages and receive something from an unknown sender, assume the worst. Do not click on anything unfamiliar. Taking the time to slow down and think before you click could save you a lot of frustration down the road."
5. Monitor your accounts for unwanted activity.
Keep watch on your bank and credit card accounts for any suspicious activity. If you see unauthorized transactions, immediately contact your bank or credit card provider for next steps and potential corrective actions.
"It's important to remain vigilant while online, both in a pandemic and when our day-to-day routines return to normal," Tucker added. "Remember to be aware, think before you click and report fraud when you encounter it."
Learn more about BOK Financial's online security, or call 844-517-3308 to report suspicious activity on BOK Financial-related accounts. The Cybersecurity and Infrastructure Security Agency keeps an up-to-date list of current threats as well.
. © 2024 BOKF, NA.