Almost everything we do now has a digital side: banking, shopping, work and staying in touch with family. That convenience has also made online crime one of the most common crimes people face. The good news is that most cyber crimes rely on a few simple tricks, and a few habits protect you against most of them.
Here are four of the most common cyber crimes and practical ways to prevent each one.
1. Phishing scams
Phishing is when criminals pretend to be a trusted organisation, such as your bank, a delivery company or an employer, to trick you into revealing passwords, card details or one-time passwords (OTPs). It arrives as email, SMS (“smishing”), WhatsApp messages or phone calls (“vishing”), and often links to a fake website that looks exactly like the real one.
How to prevent it:
- Do not click links in unexpected messages. Type the website address yourself or use the official app.
- Check the sender’s address and the website domain carefully before entering any details.
- Never share an OTP, PIN or password with anyone, including people claiming to be from your bank.
- Be suspicious of urgency: “your account will be blocked today” is a classic pressure tactic.
2. Identity theft and financial fraud
Criminals steal personal and financial details, through data breaches, phishing or malware, and use them to make purchases, take loans or empty accounts. Common variations include card fraud, fake UPI payment requests (where you are asked to “receive” money by entering your PIN) and SIM swap fraud, where an attacker takes over your mobile number to receive your OTPs.
How to prevent it:
- Turn on transaction alerts and check your bank and card statements regularly.
- Remember that you never need to enter your UPI PIN to receive money.
- If your phone suddenly loses network for no reason, contact your mobile operator immediately.
- Use strong, unique passwords and two-factor authentication on banking and email accounts.
3. Online harassment and cyberstalking
Harassment no longer needs face-to-face contact. Abusers use social media, messaging apps and email to bully, threaten or monitor victims. Some go further and install spyware on a victim’s phone or computer, or use leaked personal information to blackmail them.
How to prevent it:
- Limit what you share publicly, especially your location, phone number and daily routine.
- Review privacy settings on every social media account.
- Use a screen lock and keep your devices with you; check for apps you did not install.
- Keep evidence (screenshots, messages) and report harassment to the platform and to the police.
4. Ransomware and malware
Malware is malicious software that steals data, spies on you or damages your device. Ransomware is a type of malware that encrypts your files and demands payment to unlock them. It usually arrives through malicious attachments, fake downloads or unpatched software. (Read how the WannaCry ransomware spread worldwide in 2017.)
How to prevent it:
- Keep your operating system, browser and apps updated.
- Install apps only from official app stores and software only from official websites.
- Do not open unexpected attachments, even from people you know.
- Keep regular backups of important files on a drive or service that is not always connected.
What to do if you are a victim in India
Act quickly. Call the national cyber crime helpline 1930 or report online at cybercrime.gov.in. For financial fraud, also contact your bank immediately to block cards or accounts; the sooner you report, the better the chance of stopping the money.
For businesses
The same attacks target companies, usually at much larger scale. If you want to know how your own applications and systems would hold up, see my ethical hacking services or get in touch.
For businesses, prevention starts with knowing your weak spots. See my cybersecurity services in India, including penetration testing and security reviews.
