Cybersecurity Awareness Month: How to help protect yourself all year long

Every October, Cybersecurity Awareness Month reminds us that online safety is not just a technology issue. It is a personal finance issue too. The same habits that help protect your email, phone and online accounts can also help reduce your risk of identity theft, which often begins when criminals gain access to personal information through scams, stolen passwords, data breaches or malware.

While no one can prevent every threat, a few steady cyber habits can help make you harder to target and better prepared to respond.

Cybersecurity is often the first line of defense against identity theft. If a criminal gets into your email, banking profile or shopping account, they may be able to reset passwords, collect personal information, make purchases or impersonate you. Many attacks start with a message that looks familiar: a text about a delayed package, an email claiming your account is locked, a phone call from someone pretending to be tech support or a notice that appears to come from a bank or government agency.

Scammers often try to create urgency, excitement, fear or trust so you act before you think. Be especially alert to messages that ask you to click, verify, pay, donate, invest or share personal information.

• Bank, account or delivery scams usually by text, email or phone: “Your account is locked,” “verify your identity,” “delivery failed,” “confirm your details.”
• Tech support or government imposters typically by phone, pop-up, email, websites or text: “Virus detected,” “final notice,” “you owe taxes,” “your benefits are at risk.”
• Romance or job scams generally by social media, messaging apps, email or employment sites: “I need your help,” “can I trust you,” “earn thousands from home.”
• Prize, charity or investment scams often by email, text, social media or websites: “You’ve won,” “donate now,” “guaranteed returns,” “limited-time opportunity.”

If scammers get access to your information, it can lead to:

• Credit card fraud: Unauthorized charges or new cards opened in your name
• Bank account fraud: Unauthorized withdrawals, transfers or account access
• Loan or lease fraud: Opened loans, financing or rental agreements in your name
• Account takeover fraud: Criminals access existing accounts and may lock you out
• Government benefits fraud: Personal data is used to claim benefits meant for you

A good rule of thumb: If a request asks for personal information, pressures you to act immediately or instructs you to send money, pause. Do not click links or call numbers provided in the message. Instead, go directly to the company’s official website or app, or use a trusted phone number you already have.

1. Start with your passwords. Use strong, unique passwords for every account, especially email, banking, mobile provider, shopping and social media accounts. A password manager can help you create and store passwords securely so you are not tempted to reuse the same one, a common misstep. Reused passwords are risky because criminals can buy stolen login credentials and test them across multiple accounts. And be sure to change passwords periodically – or immediately if you suspect your account has been compromised.
2. Turn on multifactor authentication, or MFA, wherever it is available. Think of your password as the lock on your front door and MFA as the deadbolt. Even if a criminal learns your password, MFA adds another barrier, such as a code, authentication app or biometric approval. If you receive an MFA prompt you did not request, do not approve it. That may mean someone is trying to access your account.
3. Keep devices updated and secure. Software updates contain security fixes that help protect against newly discovered threats. Enable automatic updates whenever possible for smartphones, computers, tablets, applications and internet browsers. Use screen locks, turn on face or fingerprint recognition when available and set up alerts for key accounts.
4. Use credit bureau tools as extra security guards. These complimentary measures can add further protection, depending on your level of concern:
   • Check your reports and accounts. Review bank, credit card and credit report activity regularly.
   • Start with a free fraud alert. Contact one major credit bureau and it will notify the other two to confirm identities before opening new credit lines. Confusing, credit bureaus do not open credit lines, they just report. Enroll at no cost with one of the major credit bureaus so it can coordinate with the other credit bureaus to implement an additional layer of identity confirmation prior to new credit line requests.
   • Freeze all three major credit bureaus for stronger protection. A credit freeze restricts access to your credit report, making it harder for criminals to open accounts in your name. Contact Equifax, Experian and TransUnion separately. Freezes are free and can be lifted when you legitimately apply for credit later.

Warning signs may include unfamiliar charges, bills for accounts you did not open, unexpected password reset emails, missing mail, collection notices, tax return issues or notices that your information appeared in a data breach.

• If something seems wrong, act quickly. Change passwords on affected accounts, starting with email. Contact your financial institution using a trusted number or website. Secure compromised accounts, dispute unauthorized charges and use a fraud alert or credit freeze as needed.
• Report theft at IdentityTheft.gov to receive documentation and a recovery plan you may need when working with creditors. If money was stolen, accounts were opened or you have evidence of fraud, consider filing a police report as well.

Cybersecurity Awareness Month is a timely reminder, but protecting your identity should be an everyday habit. Monitor accounts, set alerts, check credit reports, limit what you share online and shred sensitive documents. A few consistent steps — along with healthy skepticism toward urgent requests — can help protect your information 365 days a year.

Before sending money, sharing information or clicking a link:

STOP and take a breath. VERIFY using a trusted phone number or website. PROTECT your personal & financial information. Taking a few minutes to verify a request can help prevent months — or even years — of financial and emotional distress.

Why do we ask so many questions? When you call M&T, you may be asked questions that seem to go beyond the standard name and address. If it feels frustrating or intrusive, please understand: Criminals call us trying to impersonate legitimate customers, so we’re always seeking to protect your accounts. Your safety is our top priority. Call us at 1-800-724-2440 (24 hours a day, 7 days a week).