Top 20 Tips to Avoid Becoming a Victim of Cybercrime

1. Use strong, unique passwords everywhere

Never reuse passwords across multiple accounts. If one website is breached, criminals will try those stolen credentials elsewhere.

Use: long passphrases that are easy for you to remember but difficult for attackers to guess.

2. Enable Multi-Factor Authentication (MFA)

A password alone is not enough. MFA adds another layer of protection, meaning a stolen password is far less useful to criminals.

Prefer authenticator apps or hardware security keys over SMS where possible.

3. Use a password manager

A password manager allows you to create and store unique, complex passwords without needing to remember them all.

4. Think before you click

Phishing remains one of the most successful ways criminals gain access.

Before clicking links or opening attachments, ask:

• Was I expecting this?
• Does the sender actually need me to do this?
• Does the message create urgency or fear?

5. Verify unexpected requests

Criminals often impersonate colleagues, suppliers, banks, or family members.

If someone asks you to:

• transfer money
• share information
• reset a password
• open a document

verify the request using a trusted method.

6. Keep your devices updated

Updates often fix security vulnerabilities.

Enable automatic updates for:

• operating systems
• browsers
• mobile apps
• security software

7. Install software only from trusted sources

Avoid downloading software from random websites, adverts, or unofficial app stores.

Many "free" tools contain malware.

8. Protect your email account

Your email is often the gateway to everything else.

Secure it with:

• a unique password
• MFA
• recovery information
• regular security checks

9. Be careful on public Wi-Fi

Avoid accessing sensitive accounts on unknown networks.

If you must use public Wi-Fi:

• avoid banking or sensitive transactions
• use a trusted VPN
• ensure websites use HTTPS

10. Back up important data

Ransomware and hardware failures can destroy valuable files.

Follow the 3-2-1 backup rule:

• 3 copies of your data
• 2 different types of storage
• 1 copy stored offline or away from your main device

11. Don’t overshare online

Cybercriminals use social media information for:

• password guessing
• identity theft
• social engineering attacks

Avoid sharing details such as:

• your address
• holiday plans
• personal information used for security questions

12. Be suspicious of urgency

Many scams rely on pressure:

• "Your account will be closed today"
• "You have won a prize"
• "Immediate payment required"

Take time to verify before acting.

13. Check website addresses carefully

Criminals create convincing fake websites.

Before entering passwords or payment details:

• check the spelling of the domain
• avoid links from unexpected emails
• use bookmarks for important sites

14. Secure your home network

Change default router passwords and keep your router firmware updated.

Consider:

• WPA3 encryption
• a separate guest network
• disabling unnecessary services

15. Use antivirus and security tools

Modern security software can detect:

• malware
• malicious websites
• suspicious behaviour

But remember: security software is a safety net, not a replacement for good decisions.

16. Be careful with attachments

Never open unexpected attachments, especially:

• invoices
• delivery notices
• documents requiring macros
• password-protected archives

17. Monitor your accounts regularly

Look for unusual activity:

• unfamiliar transactions
• new login notifications
• password reset emails you didn't request

Early detection limits damage.

18. Protect your mobile phone

Your phone contains a huge amount of personal information.

Use:

• screen locks
• biometric protection
• device encryption
• remote wipe capability

19. Don’t ignore security warnings

Browser warnings, antivirus alerts, and login notifications exist for a reason.

Don’t simply click "ignore" to make them disappear.

20. Learn how cybercriminals operate

The biggest security weakness is often not technology — it is human behaviour.

Stay informed about:

• phishing scams
• impersonation fraud
• ransomware
• fake investment schemes
• social engineering

Awareness is one of your strongest defences.

The golden rule:

Stop. Think. Verify.

Cybercriminals rely on people acting quickly without questioning what they are seeing. Taking a few extra seconds can prevent months of problems.

The good news? 

Many of these risks can be significantly reduced by implementing a strong cyber security foundation.

This is where Cyber Essentials comes in.