Stay Safe Online: Essential tips to outsmart cyber criminals
Have you recently received an email or a call from your bank or a financial institution requesting your banking and other personal details urgently? Or maybe an SMS or WhatsApp message asking for a payment to deliver a parcel or promising you unbelievable returns on an investment? They sound so authentic, but in today’s digital age, online scams and fraud are rampant, and even people who think they are savvy are falling victim to online scams and fraud.
According to Anna Collard, senior vice-president and evangelist at the cybersecurity training platform, KnowBe4 Africa, their research shows that a shocking one in three people admit to being scammed online.
“That’s not just a statistic; it’s a wake-up call. We need to understand the tactics criminals use, recognise the red flags, and arm ourselves with the knowledge to protect our hard-earned money and identities,” she stresses.
‘Phishing’ and ‘vishing’ are two terms being used to explain the tactics used by scammers to obtain your personal information and get into your bank account. They sound similar, but they work differently.
“With phishing you get an email or a text message that looks legit. It might be from your bank, or a delivery service, or even a friend. They’ll try to trick you into clicking a link or giving up your passwords or credit card details. It’s like they’re casting a wide net, hoping to catch anyone who’s not paying attention,” Collard explains.
Vishing is more direct. Instead of an email or text, they’ll call you, pretending to be from your bank, a government institution like the South African Revenue Service, or even tech support. They sound official and convincing, and they’ll use that to get you to spill your sensitive information over the phone.
But, as Collard emphasises, it doesn’t stop there. Some scammers go even deeper, using sneaky software like malware and keyloggers. Imagine someone secretly watching everything you type on your keyboard. That’s a keylogger. It records your keystrokes, so they can steal your passwords, credit card numbers, and anything else you type – the very information they’re trying to get through those initial emails and calls. They might also use malware to take screenshots of your screen or even install ‘Remote Access Trojans,’ or RATs, which let them take complete control of your computer or phone.
Collard provided tips and information that will assist you in recognising scams and protect you in this digital minefield.
What to look out for:
- Emotional manipulation: Scammers play on your feelings, using flattery, urgency, fear, or promises of quick riches. Be wary of messages that trigger strong emotions.
- Unusual communication: Watch for unsolicited messages, unknown sender addresses, and unexpected attachments or links.
- Requests for personal information: Never provide sensitive details like passwords, PINs, or One Time Pin (OTP) via email, phone, or SMS.
- “Too good to be true” offers: Be skeptical of promises of high returns, amazing job opportunities, or limited-time deals.
- Authority bias: Scammers often impersonate banks, government officials, or other trusted entities.
- Hybrid attacks: Be aware that scammers often use multiple methods of contact, such as email, text, and phone calls, to build credibility.
- AI driven attacks: Be aware of deepfake voice and video scams, and fraudulent QR codes.
How to mitigate risk:
- Enable multi-factor authentication (MFA): This is a multi-step account login process that requires users to enter more information than just a password.
- Use strong, unique passwords: Employ a password manager to generate and store complex passwords. Passwords must have at least 8 characters that include alphabets, numbers and funny characters like #@% etc.
- Be sceptical and verify: Question unsolicited messages and verify information through official channels.
- Monitor your accounts: Regularly check banking transactions and credit reports for suspicious activity. The notification feature (via SMS or e-mail), whenever there is any transaction that goes through your bank account, is a must have as this will ensure that you are aware of all movements in your bank account.
- Use secure networks: Avoid using public Wi-Fi or internet cafes for financial transactions.
- Stay informed: Participate in cybersecurity training and stay updated on the latest scam tactics.
- Up to date antivirus: Keep your antivirus and endpoint protection up to date.
- Be careful of downloads: Only download apps and files from trusted sources.
- Set daily limits for your bank account to be at low levels. For example withdrawals limit should be R1000 to R2000. If you need to withdraw more money, you can always change this on the App immediately before your transaction.
What makes you vulnerable:
- Overconfidence: Many people believe they can spot scams but still fall victim.
- Lack of awareness: Not understanding the latest scam tactics and red flags.
- Risky online behaviours: Clicking links in unsolicited emails, sharing too much personal information online, and reusing passwords.
- Know when you are a target: Teenagers, older adults, young job seekers, frequent online shoppers, and business professionals are particularly vulnerable.
- Social engineering: Scammers exploit human psychology using flattery, urgency, fear, and other manipulation tactics.
- Mobile phone vulnerability: Mobile malware is on the rise, especially for android users.
If you become a victim:
- Immediately notify your bank and freeze affected accounts.
- Change all passwords and enable MFA.
- Report the fraud to the authorities.
- Monitor your credit reports.
- Warn your contacts if their details were exposed.
Emerging threats:
- AI-generated scams (deepfakes, chatbots).
- Sophisticated QR code phishing.
- Social media-based fraud.
- Targeted business fraud.
Key messages:
- Online scams are prevalent; one in three people fall victim.
- Scammers use phishing (email/text) and vishing (phone calls) to trick you.
- They exploit emotions, urgency, and authority to manipulate victims.
- Malware and keyloggers steal sensitive data, granting control of devices.
- Recognise red flags: emotional manipulation, unusual requests, “too good to be true” offers.
- Mitigate risk: use MFA, strong passwords, verify information, monitor accounts.
- Vulnerability stems from overconfidence, lack of awareness, and risky online behaviours.
- Immediately notify banks, change passwords, and report fraud when you have been scammed.
- Emerging threats include AI-generated scams and sophisticated QR code phishing.
- Stay alert at all times