• 1
    Protect your personal information

    Never share personal or financial information — including your name, address, bank details, email or phone number — unless you are absolutely certain who you are dealing with.

    • Be cautious with unsolicited calls, emails or texts asking for sensitive information.
    • Don’t rely on caller ID or email addresses alone — these can be spoofed.
    • If in doubt, contact the organisation directly using a trusted phone number (such as the one on the back of your bank card) or by typing their official website into your browser yourself.

    Legitimate banks and trusted organisations will never pressure you into making urgent financial decisions or ask you to confirm full banking details via email.

    If something feels wrong, stop and verify.

  • 2
    Strengthen your password security

    Weak passwords are one of the easiest ways criminals gain access to accounts.

    • Create strong passwords using three random words.
    • Use a password manager to generate and securely store unique passwords.
    • Change default passwords and PINs on devices (e.g. “0000”).
    • Protect your email account with a strong, separate password — it’s often the gateway to your other accounts.

    The goal isn’t perfection. It’s making your accounts difficult to break into.

  • 3
    Sign-up to Verified by Visa or MasterCard Passkeys

    Layer up your protection. When shopping online, always check the web address to make sure you are on the correct site and sign-up to Verified by Visa or MasterCard Payment Passkeys whenever you are given the option.

  • 4
    Turn on Two-Factor Authentication (2FA/2SV/MFA)

    Two-factor authentication adds an extra layer of protection beyond your password.

    Even if someone gets hold of your login details, they still can’t access your account without the second verification step.

    Enable this feature in your account security settings wherever available.

  • 5
    Keep software, apps and devices updated

    Cyber criminals exploit weaknesses in outdated software. Regular updates fix these vulnerabilities. Below are some examples:

    • Keep your operating system, apps and browsers updated.
    • Turn on automatic updates where possible.
    • Ensure your browser security settings are set to a high level.

    Running the latest version of software is one of the simplest and most effective protections available.

  • 6
    Use antivirus software and device security features

    Install reputable antivirus software on laptops and computers, and keep it updated. Also review the built-in security settings on your phones, tablets and smart devices. Enable available protections such as firewalls and security monitoring. Layered protection makes intrusion much harder.

  • 7
    Be alert to phishing and suspicious contact

    Many fraud cases begin with phishing emails, texts or calls.

    • Never click on unexpected links.
    • Don’t download attachments from unknown sources.
    • Remember that banks will not email asking you to confirm your details via a link.
    • If an offer seems too good to be true, it usually is.

    Criminals rely on urgency, fear and excitement. Pause before reacting.

  • 8
    Be careful what you share online

    Oversharing on social media can provide fraudsters with the information they need to impersonate you or guess security answers.

    Review privacy settings regularly and think carefully before posting personal details.

  • 9
    Monitor your accounts and credit file

    Regularly check your bank accounts and credit file for unusual activity. You can obtain copies of your credit report from:

    • TransUnion
    • Equifax
    • Experian
    • ClearScore

    If you spot anything suspicious, report it immediately. If you’ve been affected by a data breach, increase your monitoring. Identity protection services such as Identity Plus can provide alerts and support if fraud occurs.

  • 10
    Destroy sensitive documents

    Fraudsters don’t need much information to attempt identity theft.

    • Shred receipts showing card details.
    • Destroy letters and documents containing your name and address.
    • Act quickly if you receive bills or correspondence for purchases you didn’t make.

    Physical information is just as valuable to criminals as digital data.