Protecting Yourself Online: Digital Security for Financial Safety

The digital environment in which financial transactions occur creates both convenience and vulnerability. Fraudsters exploit weaknesses in digital security to access accounts, intercept communications, and create convincing deceptions. This guide provides practical, actionable guidance for strengthening your digital security to reduce the risk of financial fraud.

Authentication and Account Security

• Enable two-factor authentication (2FA) on all financial accounts, email accounts, and social media accounts. Use an authenticator app rather than SMS-based 2FA where possible, as SMS can be intercepted.
• Use unique, complex passwords for each financial account. A password manager (such as Bitwarden, 1Password, or the built-in capabilities of your operating system) allows you to maintain strong, unique passwords without needing to memorise them.
• Never share login credentials, one-time passwords, or security codes with anyone, regardless of the reason given.
• Regularly review the devices and sessions authorised on your financial accounts and remove any that you do not recognise.
• Set up transaction notifications on your bank accounts so that you are immediately alerted to any activity.

Device Security

• Keep your operating system, browser, and all applications up to date. Security updates patch known vulnerabilities that can be exploited by attackers.
• Use reputable antivirus and anti-malware software and ensure it is kept current.
• Do not install remote access software (AnyDesk, TeamViewer, etc.) at the request of someone you do not know and trust.
• Be cautious about downloading software or opening attachments from unknown sources.
• Ensure your home Wi-Fi network is secured with a strong password and WPA3 encryption. Avoid conducting financial transactions on public Wi-Fi networks.
• Enable device encryption on your phone and computer to protect your data if your device is lost or stolen.

Safe Browsing and Communication

• Verify website URLs carefully before entering login credentials or financial information. Look for subtle misspellings or unusual domain extensions that indicate a fraudulent clone site.
• Ensure the website uses HTTPS (indicated by a padlock icon in the browser address bar) before entering sensitive information.
• Do not click on links in unsolicited emails, SMS messages, or social media messages claiming to be from financial institutions. Instead, navigate directly to the institution's website by typing the URL.
• Be cautious about sharing personal or financial information on social media, as this information can be used by fraudsters to craft targeted approaches.
• Use a dedicated email address for financial accounts that is not used for general correspondence or social media.

Verifying Financial Entities Online

• Always verify the regulatory status of any financial entity before transferring funds. Use the relevant national regulator's website (not links provided by the entity) to check their register.
• Check the ESMA investor warning lists and the warning lists of relevant national regulators.
• Compare the website URL and contact details provided by the entity against those listed in the regulator's register.
• Search for the entity's name combined with terms like "scam," "warning," or "complaint" to identify any public reports.
• Be particularly sceptical of entities that contact you unsolicited, regardless of how professional their online presence appears.

What to Do If Your Security Is Compromised

• If you suspect your banking credentials have been compromised, contact your bank immediately and request that your online banking access be locked pending a security review.
• Change all passwords for accounts that may have been exposed.
• If you installed remote access software at someone's request, uninstall it immediately, change all passwords on the affected device, and have the device checked for malware.
• Monitor your accounts closely for unauthorised activity and report any suspicious transactions immediately.
• File a report with your local law enforcement if you believe your financial data has been stolen.