Last year, we provided you with several security tips to safeguard your data and confidential records. Unfortunately, there has been a persistent increase in attacks and attempts at client fraud across the financial services industry.
These attackers frequently gain access to personal email accounts and pretend to be a trusted person. Below are some recommendations to help protect you online.
Be wary of phishing attempts
Phishing attacks often involve emails or messages designed to obtain sensitive information or prompt users to click on harmful links. It is advisable to be wary of unsolicited emails, particularly those requesting passwords or personal details. Confirm the authenticity of the sender and refrain from clicking on questionable links or downloading attachments from unfamiliar sources.
Protect yourself from AI vishing and phishing
Phishing attacks have significantly advanced with the integration of AI technology. AI-driven voice phishing, or “vishing”, involves duplicitous phone calls where attackers pose as credible individuals or entities to obtain sensitive information. Exercise caution when receiving unexpected calls that request personal or financial details. Always confirm the caller’s identity before divulging any information. If uncertain, terminate the call and contact the individual using a verified telephone number.
Bank account fraud awareness
Fraudsters may attempt to deceive you by sending false bank account details. Always validate the bank account sender’s details before making any transactions, ideally by ensuring you know who you are dealing with directly and only providing your information to businesses you know and trust.
Create strong, unique passwords
To create strong passwords, combine uppercase and lowercase letters, numbers, and special characters. Do not use easily guessable information like birthdays or common words. An example of a strong password is “Bear.Table.Car55”.
Use different passwords for different accounts
Using the same password for multiple accounts increases your risk of online crimes like identity theft. Each account should have a unique password to limit damage if one is compromised. Never reuse your email password with other services, as it is crucial for securing your online presence.
Change passwords regularly
Update your passwords annually to reduce the risk of unauthorised access.
Storing passwords
Writing down unique passwords in a secure notebook at home is an alternative to re-using the same password repeatedly. Digital password managers provide another option, offering a way to create and store strong, unique passwords for each account securely. Microsoft Edge, Google Chrome, and iPhones all come with built-in password managers, which can be used for managing passwords.
Enable Two-Factor Authentication (2FA)
Adding an additional layer of security with two-factor authentication (2FA) or multi-factor authentication (MFA) improves the protection of accounts. After entering a password, users typically need to enter a code sent to their mobile device or email. This is important for accounts that hold financial information and email accounts. Services such as Gmail, Amazon, and bank accounts offer 2FA, and it is recommended to set up this feature if it has not been done yet.
Chase de Vere communications
Chase de Vere puts a huge focus on cyber security and has achieved the ‘Cyber Essentials’ accreditation every year since 2015. This is a government scheme which recognises organisations that have strong measures in place to combat internet-based cyber security threats.
Chase de Vere advisers will always try to communicate with you securely via our Personal Finance Portal (PFP) this helps ensure that your messages are private and confidential.
We will only ever send bank account details via secure messages on official invoice documents.
If you have not already signed up to PFP, please endeavour to do so, and contact your Adviser to get the process started. We are constantly improving the security of this tool to help protect your communications with us.
Report suspicious activity
If you receive a suspicious email or encounter a potential phishing attempt, report it to the appropriate authorities such as Action Fraud. By reporting such incidents, you help protect yourself and others from falling victim to phishing scams.
Below are some helpful sites to provide more information that may help you stay safe online
Get Safe Online – Very useful resource of practical tips on staying safe online, including a tool to help you spot scam websites. Useful self-help tools
Cyber Aware – NCSC.GOV.UK – tips on how to stay safe online including helpful guides on how to set up Two-Factor authentication on some popular email services
Action Fraud – The National Fraud and Cyber Crime reporting centre, if you believe you have been the victim of an online crime, you can use this site to report it, and it provides practical advice for victims of online crime.