Skip to main content
FraudGuardRecovery & Cyber Safety

Cybersecurity Protection

Reduce your exposure, permanently

Most successful fraud relies on a small number of weaknesses. Closing them takes an afternoon and protects you for years.

We never ask for credentials. We will never ask for your passwords, PINs, one-time codes, seed phrases, private keys, full card numbers or remote access to your devices. Anyone who does is not acting on our behalf. Read our Anti-Impersonation Policy.

Passwords

  • Use a unique password for every account, generated and stored in a reputable password manager
  • Prioritise length over complexity; a long passphrase beats a short scrambled word
  • Change the password for your primary email first after any compromise
  • Never reuse a password across email, banking and cryptocurrency accounts

Multi-factor authentication

  • Prefer an authenticator app or hardware security key over SMS codes
  • Store backup codes offline, not in the same mailbox you are protecting
  • Treat any unexpected approval prompt as a warning sign, and never approve one you did not trigger
  • Never read a one-time code aloud to a caller, whoever they claim to be

Devices

  • Keep the operating system, browser and apps updated
  • Use full-disk encryption and a screen lock on phones and laptops
  • Install software only from official stores or vendor sites
  • Never grant remote access to someone who contacted you unexpectedly

Email security

  • Check for unfamiliar forwarding rules, filters and recovery addresses
  • Review connected apps and revoke anything you do not recognise
  • Verify links by their real domain, not the displayed text
  • Treat urgent payment instructions from any 'known' sender as unverified until confirmed by phone

Social media

  • Restrict who can see your posts, contacts and personal details
  • Be sceptical of investment advice, giveaways and 'account help' in direct messages
  • Verify a friend's unusual request by contacting them another way
  • Remove old sessions and unrecognised logins

Cryptocurrency wallets

  • A seed phrase or private key belongs offline, on paper or metal - never in a photo, note or cloud file
  • No legitimate service, support agent or exchange ever needs your seed phrase
  • Use a hardware wallet for meaningful balances, and verify addresses on the device screen
  • Review and revoke token approvals you no longer need

Identity protection

  • Share identity documents only with organizations you initiated contact with
  • Monitor your credit file where such a service is available in your country
  • Consider a credit freeze or fraud marker after identity theft
  • Keep a record of where copies of your documents have been sent

A 30-minute security checklist

If you only do one thing today, do this in order.

  1. 1Secure your primary email: new unique password, app-based MFA, check forwarding rules.
  2. 2Secure your mobile account with a carrier PIN to reduce SIM-swap risk.
  3. 3Turn on MFA for banking, payment and exchange accounts.
  4. 4Install a password manager and replace reused passwords, starting with financial accounts.
  5. 5Update your devices and browsers, and remove software you do not recognise.
  6. 6Review payees, standing orders, connected apps and active sessions.

Need help understanding what happened?

Document the incident, protect your accounts, and identify the appropriate next steps.

Start a Case Assessment