Cybersecurity best practices: Avoid these 8 mistakes online

According to the Citizens Cybersecurity and Fraud Survey, 50% of consumers have experienced an attempted online scam or fraud, and 23% report that it's happened multiple times.

With the rise of ever-changing scams and schemes, scammers are coming up with new and creative ways to trick people into revealing private information. And scams are constantly evolving, with 90% of respondents agreeing that AI has made it harder to tell what's real and what isn't. If you've become victim to fraud or identity theft, contact your bank immediately.

Here are eight of the most common mistakes people are making online and cybersecurity best practices you can follow to keep your personal information safe.

Mistake #1: Choosing weak usernames and passwords

Relying on the same username and password across multiple apps and websites is simple and convenient, but it's not the best way to protect yourself. For instance, if all your friends have your Netflix password, and that also happens to be your banking password, then you're at an increased risk of having your accounts compromised. All it takes is one data breach for cybercriminals to gain access to all your other accounts using the same password.

How to prevent this mistake:

To better protect your online accounts, follow these cybersecurity best practices:

• Change your passwords regularly. Take advantage of password management apps that can help you remember your various logins.
• Always use a strong password. A secure password consists of at least 16 characters and is a combination of uppercase and lowercase letters, numbers and symbols. Avoid real words or phrases, and never use personal information such as names, birthdays or addresses.
• Enable multi-factor authentication on your accounts whenever it's available to deter cybercriminals.
• Change usernames regularly, especially if any of your previous usernames have been involved in a data breach, and use a different username for each website or account.

Mistake #2. Not updating your software

Whether it's an app on your phone, a software program on your laptop or the entire operating system on any type of device, out-of-date programs can leave you vulnerable to attack. The creators of software and operating systems are continually updating their programs to close security gaps, eliminate bugs and minimize vulnerabilities.

How to prevent this mistake:

It's up to you to ensure your systems and software stay up to date. You have a few options for doing so:

• Manually update your programs, checking the "about" menu weekly to see if the program needs a refresh.
• Set up automatic updates, so that any new security patches or program updates are downloaded and installed without you having to check for them.

Mistake #3: Ignoring device security protections

Computer viruses can hitch a ride into your files from various places, such as a downloaded email attachment or sketchy website. Just like the common cold or flu, computer viruses are constantly evolving and mutating. Without antivirus or anti-malware software, your devices (and personal information) are vulnerable to infection.

How to prevent this mistake:

Antivirus and anti-malware software scans your devices daily, detecting any files that could potentially cause your systems harm. To reduce your risk of infection, take the following precautions:

• Install a program from a legitimate, trusted company and, most importantly, update it regularly.
• Keep the software up to date for the best form of protection, as it allows the program to spot the newest and potentially most dangerous viruses before they can cause serious damage.

Mistake #4: Oversharing on social media

Fraudsters usually need at least two pieces of your personal information to steal your identity. If your birthday is listed on Facebook, along with your street address (from those party invites you sent out), then you are at risk.

How to prevent this mistake:

Always be mindful of what you’re posting and whom you’re accepting as a friend. If getting those happy birthday comments mean a lot to you, then change your birthday to just the month and date or the day before or after your actual birthday to thwart identity thieves.

Mistake #5: Shopping on untrustworthy sites

That amazing $15 deal for must-have designer shoes on a site you've never heard of is probably too good to be true. Scammers often create fake websites or clone legitimate ones to trick shoppers into entering credit card numbers, personal details or login credentials. These sites might advertise luxury items at impossibly low prices, only to deliver counterfeit goods, or nothing at all. Even worse, your payment information could be harvested and sold on the dark web, leading to identity theft or fraudulent charges on your accounts.

How to prevent this mistake:

To shop safely online, follow these best practices:

• Before putting your financial information into a new site, check for the padlock icon in the address bar and make sure the website starts with "https" rather than "http" (the "s" is short for "secure").
• Stick to retailers you know and trust. If you're exploring a new site, search for its name along with terms like "scam" or "reviews" to see what others have experienced.
• Avoid deals that seem too good to be true. Flashy discounts and time-limited offers are often designed to make you act quickly without thinking. Take a moment to compare prices on other reputable sites. If the discount seems extreme, it's likely a scam.

Mistake #6: Using unsecure public Wi-Fi

Try not to shop online when you're connected to public Wi-Fi networks. These networks are often unencrypted and can be prime targets for hackers looking to intercept your sensitive data, like credit card numbers, login credentials and personal information.

How to prevent this mistake:

To protect your information on public networks, follow these guidelines:

• Wait until you're at home or on a trusted, secure network.
• Use your smartphone's cellular data connection. It's typically more secure than public Wi-Fi.
• If you must use public Wi-Fi, protect yourself by using a virtual private network (VPN). A VPN encrypts your internet connection, creating a secure tunnel between your device and the websites you visit, which helps shield your personal and financial information from prying eyes.

Mistake #7: Installing third-party or unverified apps

New apps can be exciting and fun, especially when they promise deals or convenience. But when it comes to inputting your credit card or bank details, installing an unverified or unfamiliar app can be risky. Fraudsters often create fake shopping apps that mimic legitimate retailers to trick users into entering sensitive information. These apps may look professional, but behind the scenes, they can steal your data, install malware or hijack your device.

How to prevent this mistake:

To avoid downloading harmful apps, take the following precautions:

• Before downloading any app, do your research. Only install apps from trusted sources and check that the developer is reputable.
• Look for apps that have been around for a while, with high ratings and many positive, detailed reviews.

Mistake #8: Not checking your accounts often enough

If you rarely check your account balances and transactions, you may miss fraudulent charges that can expose your finances and personal information. Fraudsters often use small, easy-to-miss unauthorized micro-charges to test stolen account and card numbers before moving on to larger chargers and withdrawals. Once they gain access, they may even change your contact information, so you don't receive transaction alerts.

How to prevent this mistake:

Regularly monitoring your bank accounts helps you quickly detect any suspicious activity, before scammers have a chance to do extensive damage. Take these proactive steps to keep your accounts safe:

• Use a mobile banking app to frequently check account balances.
• Enable transaction and fraud text alerts to stay in the know on potential issues.
• Ensure your account contact information is correct and know how your bank will reach out to you if an issue arises.

Stay safe online

Even the strongest passwords and latest software updates can't prevent every fraud attempt. One of the most effective ways to protect yourself is by regularly reviewing account activity and enabling alerts for unusual transactions or login attempts. Early detection can help you respond quickly if something doesn't look right.

If you believe you've been a victim of fraud or want to learn more cybersecurity best practices, visit the Citizens fraud and security center.