What You’ll Learn

Cyber Threats: Passwords, Phishing, and Software Security

Using the same password across multiple websites is one of the most common and dangerous habits — a single data breach can expose all your accounts. Use unique passwords for every site or employ a reputable password manager, and enable two-factor authentication wherever available. Avoid using personal information or common phrases in passwords. Keep your browser, anti-virus software, and operating system fully updated, as outdated systems create vulnerabilities. Turn off automatic image downloads in email clients, as cybercriminals can embed malicious code in images. Treat unsolicited emails with links or attachments as phishing attempts and navigate directly to websites rather than clicking links.

Social Media, App Downloads, and Data Breaches

Oversharing on social media is a significant identity theft risk — cybercriminals scour public profiles for key details like your mother’s maiden name or place of birth to reset account passwords. Make social media accounts private wherever possible. Before downloading any app, research the developer, as malicious apps can steal data and monitor your device’s activity. If you’ve experienced a third-party data breach, immediately freeze your credit with the three major credit bureaus and change passwords on any accounts that shared credentials with the compromised site.

Common Scams: Government Impersonation, Romance, and More

Government impersonation scams come in many forms: callers claiming to be from the Social Security Administration, IRS, or Medicare asking for your personal information or threatening consequences. The IRS does not contact taxpayers by phone, email, or text — ever. Romance scammers build online relationships and then request money from people they have never met in person. Grandparent scams involve fraudsters posing as a grandchild in urgent need of funds. Sweepstakes scams require you to pay a fee to collect supposed winnings. Spearfishing scams use compromised credentials in email subject lines to make you believe your entire digital life has been accessed. If in doubt, hang up and call the organization directly using a verified number.

Protecting Children and Business Operations

Minor children’s social media accounts warrant their own privacy review — check settings and discuss the risks outlined in this checklist with them directly. Business owners face additional exposure: implement a cybersecurity plan that includes confirmation protocols before any electronic fund transfer is executed. Ensuring that employees follow best practices for password management, phishing awareness, and data handling reduces organizational risk alongside personal exposure.

Responding If You’ve Already Been Victimized

If you’ve been the victim of identity theft or fraud, act immediately: contact all affected financial institutions to report the fraud and limit further exposure. File a report with your local police department and the Federal Trade Commission (FTC). Notify the three major credit bureaus and place a freeze or fraud alert on your credit files. If you’ve received an odd message from a friend or family member asking for money or sharing suspicious links, call them directly to verify — their account may have been compromised and the message was not actually from them.

Additional Layers of Protection: VPNs, Monitoring Services, and Insurance

A virtual private network (VPN) from a reliable provider adds a meaningful layer of privacy and security to your online activity. Identity theft protection services can monitor your credit scores, flag new account openings, and alert you to suspicious activity on your behalf. Before purchasing a standalone identity theft insurance policy, check whether coverage is already included in your homeowners or auto insurance policy — it frequently is. Be aware that fraudulent credit card charges are typically capped at $50 per card, and guard against over-insuring yourself in this area.