Staying safe online

What you need to know about scams

Remember, if it sounds too good to be true, it probably is a scam.

What is a scam?

A scam is when somebody gains your confidence in order to steal your money or personal information. Fraud is when somebody accesses your money without your knowledge or permission. In this case, you mightn’t even be aware anything has happened.

Scammers and fraudsters play on emotions like loneliness, fear and compassion. They can identify vulnerabilities such as isolation, age, and low computer skills to trick you into making decisions. They may make offers of money or other rewards, or they could use threats and intimidation.

If you’re concerned about the safety of your accounts, contact us on 13 13 36 immediately.

In the meantime, here’s what to do if you receive a suspicious message or request.

Tips to help you avoid scams 

• If you think a phone call sounds suspicious, hang up. 

• Never share passwords or personal information, especially with someone you don’t know. 

• Don’t open SMS or email links or attachments unless you know who they’re from. 

• Protect your computer with antivirus software. 

• Don’t send money or personal details to people from unusual locations. 

• Don't accept a message or friend request on social media from someone you don't know. 

• Update your privacy settings on your social media accounts. 

• Be wary of unexpected contact, particularly if you’ve replied to something online. 

• Do your own checks on any investment opportunity to make sure it's real. 

• Beware of promises of low risks with high returns. 

• Consider seeking independent financial advice before you invest. 

• Check your bank account and statements regularly to watch out for unusual activity. 

Common scams to watch out for

The ACCC’s Scamwatch has a range of information on the below if you’d like to find out more.

Pointers for advice practices 

If you’re an adviser working with CFS, here’s what you need to know about basic security measures to help protect your business against common cyber security threats.  

Use security software 

Security software such as antivirus and malware protection are a good first line of defence in protecting your devices.  

Modern versions of Windows include free Windows Security to scan for suspicious files and programs, and detect and remove malware from your devices. Microsoft also allows the installation of third-party security software for users looking for a higher standard of protection. 

Apple Mac computers don't include security software by default, so it’s important to install reputable third-party software. 

Good security software can help protect your business from phishing attacks, ransomware (which is a type of malicious software designed to block access to a computer system until a sum of money is paid) and other threats.  

In selecting security software (such as anti-virus or anti-malware), be sure to first read reviews to assess its reputation. The Australian government also provides guidance around antivirus software if you’d like more information. 

Remember, it’s important to update your software regularly to reduce the chance of a cybercriminal using a known weakness or hack your device.  

You may also want to turn on automatic updates for your devices and software. If your device or software is too old and updates aren’t available, consider upgrading to a newer product.  

Only install software from reputable developers 

Cyber criminals are known to embed malicious code into software that appears legitimate as a way to infect their targets with malware, which is designed to disrupt, damage, or gain unauthorised access to a computer system. Often, this software is pirated or available via unauthorised or unofficial sources. 

The safest way to avoid downloading malicious code is to only download software from official stores. 

The Microsoft Windows Store is the official online marketplace for purchasing and downloading software for Windows. For Macs and Apple iOS devices, it’s Apple’s App Store. Google Play is the official online marketplaces for Android devices.  

Limit administrative access to your computers 

Each user account has rights to perform specific functions. In small businesses, it’s often the case that all users are given full online administrative rights by default. That means they can install new programs, change security settings, and choose personalised colour schemes and wallpapers. 

Restricting administrative access greatly reduces the number of infections and security breaches. Most users simply don't need administrative access, even if they want it. 

Encrypt your hard drives 

Disk encryption ensures that if a computer is stolen, the thief is unable to access the data. 

The only way disk encrypted-data can be accessed is if the drive is powered on and the thief has the user’s account login details. 

Microsoft Windows disk encryption is called Bitlocker. Microsoft provides step-by-step instructions for using Bitlocker on its website. 

For an Apple Mac, a program called FileVault is used to protect hard drive content. Apple’s instructions for using FileVault are available from Apple’s support website. 

Back-up your data regularly 

Regular back-ups can help you recover your information if it’s lost or compromised. 

• Create and implement a plan to regularly back up your information. 
• Test your back-ups to ensure you can recover information successfully.  

Secure your network

Many small businesses don't have dedicated technology staff to install, configure and update their networks and the job is often left to somebody who mightn't have had formal training.

While networks make it easy to share information within the office and with others, an improperly configured network risks allowing outsiders to disrupt your business activities or steal data.

Here are six essential steps for protecting your business network.

Cloud security

A cloud service can offer small businesses improved productivity, flexibility and reduced costs by delivering data storage services or applications such as accounting packages over the internet. While using these services can create new opportunities for your business, cloud services also introduce some security and privacy risks. Some of the factors to consider when choosing cloud providers is location, their security measures, scalability and flexibility, service level agreements and cost structures. 

For more information, check out the Australian Cyber Security Centre’s Small Business Cyber Security Guide. If your clients are looking for tips relevant to them, point them to our Staying safe online hub for tips and resources.